相關主題
商品描述
Direct from Microsoft, this Exam Ref is the official study guide for the new Microsoft SC-200 Microsoft Security Operations Analyst certification exam.
Exam Ref SC-200 Microsoft Security Operations Analyst offers professional-level preparation that helps candidates maximize their exam performance and sharpen their skills on the job. It focuses on the specific areas of expertise modern IT professionals need to demonstrate real-world mastery of threat mitigation with Microsoft 365 and Azure tools. Coverage includes mitigating threats using:
- Microsoft 365 Defender: Detect, investigate, respond, and remediate threats to the productivity environment, endpoints, and identity; manage cross-domain investigations
- Azure Defender: Design and configure Azure Defender implementations; plan and implement the use of data connectors to ingest data sources; manage alert rules; configure automation and remediation; investigate alerts and incidents
- Azure Sentinel: Design and configure a workspace; ingest data sources; manage analytics rules; configure SOAR; manage incidents; use workbooks to analyze and interpret data; hunt for threats
Microsoft Exam Ref publications stand apart from third-party study guides because they:
- Provide guidance from Microsoft, the creator of Microsoft certification exams
- Target professional-level exam candidates with content focused on their needs, not "one-size-fits-all" content
- Streamline study by organizing material according to the exam objective domain (OD), covering one functional group and its objectives in each chapter
- Feature Thought Experiments to guide candidates through a set of "what if?" scenarios, and prepare them more effectively for Pro-level style exam questions
- Include "Need more review?" aids pointing you to more study materials if you need them
- Explore big picture thinking around the professional's job role
For more information on Exam SC-200 and the Microsoft Certified: Security Operations Analyst Associate credential, visit https: //docs.microsoft.com/en-us/learn/certifications/security-operations-analyst/.
商品描述(中文翻譯)
直接來自微軟，本書《Microsoft SC-200 Microsoft Security Operations Analyst 考試參考》是全新的認證考試的官方學習指南。
Exam Ref SC-200 Microsoft Security Operations Analyst 提供專業級的準備，幫助考生最大化考試表現並提升工作技能。它專注於現代 IT 專業人員需要展示的威脅緩解的具體專業領域，使用 Microsoft 365 和 Azure 工具。內容涵蓋使用以下工具來緩解威脅：
-
Microsoft 365 Defender: 偵測、調查、回應和修復對生產環境、端點和身份的威脅；管理跨域調查 -
Azure Defender: 設計和配置 Azure Defender 實作；計劃和實施使用數據連接器來攝取數據來源；管理警報規則；配置自動化和修復；調查警報和事件 -
Azure Sentinel: 設計和配置工作區；攝取數據來源；管理分析規則；配置 SOAR；管理事件；使用工作簿分析和解釋數據；尋找威脅
微軟的考試參考出版物與第三方學習指南不同，因為它們：
- 提供來自微軟的指導，微軟是 Microsoft 認證考試的創建者
- 針對專業級考試考生，內容專注於他們的需求，而不是「一刀切」的內容
- 通過根據考試目標領域 (OD) 組織材料來簡化學習，每章涵蓋一個功能組及其目標
- 包含思考實驗，引導考生通過一系列「如果呢？」的情境，並更有效地為專業級考試問題做準備
- 包括「需要更多複習？」的輔助工具，指引您尋找更多學習材料
- 探索專業人員工作角色的全局思維
有關 SC-200 考試和 Microsoft Certified: Security Operations Analyst Associate 證書的更多信息，請訪問 https://docs.microsoft.com/en-us/learn/certifications/security-operations-analyst/。
