microsoftlearning / sc-900-microsoft-security-compliance-and-identity-fundamentals

SC-900: Microsoft Security, Compliance, and Identity Fundamentals

This repository includes demo scripts and lab instructions for SC-900T00: Microsoft Security, Compliance, and Identity Fundamentals. Both the demo scripts and labs assume access to the preconfigured WWL M365 Enterprise 2019 SPE_E5 tenant, available through an authorized lab hoster (ALH) and the use of an Azure subscription provided by the ALH. Demo scripts and lab instructions may be run on a user's own Microsoft 365 tenant and Azure subscription, but are not guaranteed, as some features may not be enabled with a user's personal subscription.

The user interfaces (UI) for Microsoft 365 and Azure are continually being updated. As these changes happen every effort is made to ensure demo and lab steps are updated to reflect changes, but it is not uncommon to see variances in the UI described in the labs/demos and the actual tenant.

• The demos are intended to be used by instructors to demonstrate functionality, in a live environment, during course delivery. Please note, a previously available demo has been removed, which is why the numbering goes from DEMO_08_explore_m365_defender_portal to DEMO_10_explore_service_trust_portal.

• The labs are available as a supplement to the course content. These labs are intended for the case where learning partners are able to make the environment available to learners, for an extended period of time, after the 1-day course delivery, as there is not sufficient time for instructors to cover the course content and for students to complete labs, during the course delivery. The labs are designed as stand-alone labs (there is no dependency between labs). Please note, a previously available lab has been removed, which is why the numbering goes from LAB_09_explore_m365_defender_portal to LAB_11_explore_service_trust_portal.

• Are you a MCT? - Have a look at our GitHub User Guide for MCTs

What are we doing?

• To support this course, we will need to make frequent updates to the course content to keep it current with the Azure and Microsoft 365 services used in the course. We are publishing the lab instructions and lab files on GitHub to allow for open contributions between the course authors and MCTs to keep the content current with changes in Azure and Microsoft 365.

• We hope that this brings a sense of collaboration to the labs like we've never had before - when Azure or Microsoft 365 changes and you find it first during a live delivery, go ahead and make an enhancement right in the lab source. Help your fellow MCTs.

How should I use these files relative to the released MOC files?

• The PowerPoints are still going to be your primary source for teaching the course content.

• It will be recommended that for every delivery, trainers check GitHub for any changes that may have been made to support the latest Azure and Microsoft 365 services, and get the latest files for their delivery.

How do I contribute?

• Any MCT can submit a pull request to the code or content in the GitHub repo, Microsoft and the course author will triage and include content and lab code changes as needed.

• You can submit bugs, changes, improvement and ideas.

Notes

Classroom Materials

It is strongly recommended that MCTs and Partners access these materials and in turn, provide them separately to students. Pointing students directly to GitHub to access Lab steps as part of an ongoing class will require them to access yet another UI as part of the course, contributing to a confusing experience for the student. An explanation to the student regarding why they are receiving separate Lab instructions can highlight the nature of an always-changing cloud-based interface and platform. Microsoft Learning support for accessing files on GitHub and support for navigation of the GitHub site is limited to MCTs teaching this course only.

sc-900-microsoft-security-compliance-and-identity-fundamentals's Issues

Explore Insider risk management Lab 14 Task 4 Step 2 (viii)

Lab/Demo: 14

Task: 4

Step: 2 viii

Description of issue: it says "On the page to Decide whether to use default or customer indicator thresholds, leave the default setting Default thresholds, then select Next."

Solution: The defulat option is "Apply thresholds provided by Microsoft". Please correct above instruction.

Issue in LAB_13_explore_senstivity_labels

Module: 04

Lab/Demo: 13

Task: 02

Step: 03

Description of issue
"From the top menu bar, select Sensitivity. From the drop down select Confidential - Finance."

As mentioned in the step above, we did not get the "Sensitivity" option in top menu bar in WORD. Please help us with the this, and do let us know where do we find this option.

Issue in SC-900-LAB_13_explore_senstivity_labels

Module: 04

Lab/Demo: LAB_13_explore_senstivity_labels

Task: 01

Step: 09

Description of issue
"In the middle of the page, notice how there are three labels already created. Select Confidential - Finance. A window opens that provides information about this label. Note how this label is set to support both encryption and content marking. Select Edit Label at the top of the page to view some of the basic configuration settings."

As mentioned in the step above, we did not get the three labels already created. Could you please let us know how it is created or else do we have to create it.

LAB_05_explore_nsg: Cannot RDP to VM

Module: 03

Lab/Demo: 05

Task: 01

Step: 21

Description of issue

The steps seem to assume we are going to be able to successfully connect via RDP, however...this doesn't succeed.

I am uncertain how it is expected to succeed in any case...as the previous steps have specifically disabled the port 3389 inbound access + the NSG config.

If this anomaly is caused by recent Azure changes in default behavior, recommend either excising the steps from 16-21 altogether, or perhaps (if connecting to VM is desired task) replace them with new steps to create a Bastion connection to the VM.

Issue in LAB_08_explore_mcas.md

Lab/Demo: 08

Task: 01

Step: 09

Description of issue: App connector is not available.

As per the Lab guide, there should be app connector in the setting cog icon but it is not available there which is effecting Task 2 and Task 3 as well.

Word "not" misplaced in instructions

Module: 02

Lab: 05

Task: 04

Step: 06

Description of issue
The word "not" is in the wrong sentence.

Repro steps:

1. The page SHOULD display (now)
2. IF the Internet does NOT display

Lab: Explore Azure Security Center Needs Review

Module: 03

Lab/Demo: Explore Azure Security Center

Task: 1, 2, 3

Step: All

Description of issue

Lab: Explore Azure Security Center needs to be reviewed as it looks like most steps don't align with an Azure Pass subscription. Not sure if there has been UI changes which has moved some of the features mentioned, but as of right now attempting to go through these steps have been confusing. Let me know if I can provide any further information.

Issue in LAB_11_explore_service_trust_portal.md

Module: 04

Lab/Demo: 11 - LAB_11_explore_service_trust_portal

Task: https://github.com/CloudLabs-MOC/SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals/blob/prod/Instructions/Labs/LAB_11_explore_service_trust_portal.md#task-1-in-this-task-you-will-explore-the-service-trust-portal-and-the-different-types-of-content-available-you-will-learn-how-to-access-reports-and-how-to-save-reports-to-your-library

Step: 2 - In the address bar enter https://aks.ms/STP.

Description of issue
The URL is not correct

Step: 12 - From the top of the page, select Industries & Regions. Choose Regional Solutions. Notice the different Regions listed. Select United Kingdom.

Description of issue
No options are available to select under Industries & Regions as shown in below video demo of the issue.

Video demo

Please take a look into this
Regards
Bony

LAB_11_explore_service_trust_portal.md

Module: 00

Lab/Demo: 11

Task: 02

Step: 05

Description of issue
There are no longer a specifically-labelled set of "six key privacy principles" on the page in this step.

Probably need to rewrite that step to reference other privacy resources that are available on that page now, or possibly you can find where the 6 key principles live now - I couldn't find them.

English Lab Instructions

Hi,

Where can I find lab instructions in English. Thanks

Step number missing

Lab: 13

Task: 01

Step: 04

Description of issue
The Step number is missing on Step 4, messing up the formatting for that step and its bullet points.

UI updates to Conditional Access

Module: 01

Lab: 03

Task: 02

Description of issue
Misc UI updates to Conditional access
Repro steps:

1. Task 2, Step 4: The default view is Overview; added instruction to switch to Policies.
2. Task 2, Step 10: Under Target resources, select No target resources selected.
3. Task 2, Step 17: After policy creation, we are returned to the Overview page, not Policies

Wrong admin center URL in Task 1

Module: 01

Lab/Demo: 01

Task: 01

Step: 01

Description of issue
When the lab was updated, http://entra.microsoft.com was used in Step 1, but the instruction in Step 2 makes it clear that we should use https://admin.microsoft.com and launch the Entra admin center from there. Also, we should add "Show All", if needed.

Azure Active Directory is no longer available from the M365 admin center

Module: 01

Lab: 01

Task: 01

Step: 03

Description of issue
Azure Active Directory is no longer available from the M365 admin center (Entra is available from All admin centers)

LAB_07_explore_sentinel.md - unable to find Data connectors

Module: 00

Lab/Demo: 07

Task: 03

Step 03

Description of issue

I can't find Data connectors or configuration group in the Log analytics workspace.

So, I was unable to perform Task 4 as well.

Azure AD Admin center has been reorganized

Module: 01

Lab: 01

Task: 02

Step: ALL

Description of issue
Azure AD Admin center has been reorganized and no longer matches any of these instructions.

Microsoft Azure Management missing/changed name

Module: 00

Lab: 03

Task: 2

Step: 12

Description of issue

Microsoft Azure Management doesn't appear to still exist as a cloud app, or has been renamed.

Confusing wording

Hi,

In the sections

https://github.com/MicrosoftLearning/SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals/blob/master/Instructions/Demos/DEMO_12_explore_senstivity_labels.md#demo-part-2

And

https://github.com/MicrosoftLearning/SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals/blob/master/Instructions/Demos/DEMO_12_explore_senstivity_labels.md#review

I think the term "show" is confusing in the wording:

And

It's not about "show" = "to display on the UI", but rather "learn how to use".

So maybe "In this step, you'll show the process of" should be replaced by "In this step, you'll learn about the process of" or "In this step, you'll discover the process of", and "You also showed how to" should be replaced by "Then, you learned how to" or "Then, you discovered how to".

Best regards,
François

Issue in SC900-LAB_15_explore_core_ediscovery

Module: 04

Lab/Demo: 15

Task: 04

Step: 09

Description of issue
"From the bottom of the page, select Actions. Note the available options, then select Export results."

As mentioned in the above step, after selecting "export results" even though the "Test Holds-Sales Search" is in completed state, we are not able to get the further steps and download the result. we are getting the issue as mentioned in image below. Can you suggest us on how to resolve this issue.

Label policy missing.

Lab: 13

Task: 1

Step: 18

Description of issue
Step 18 states "Select Global sensitivity label policy" but this doesn't exist within the cloudshare template. All I can see: "Confidential-Finance policy" and "Highly confidential policy".

I think the template for this lab needs amending.

Issue in LAB_05_explore_nsg.md

Module: 00

Lab/Demo: 00

Task: 00

Step: 00

Description of issue: Inconsistent in title

Repro steps:

The title of lab is inconsistent.

Explore started with Azure Network Security Groups (NSGs)
&
Lab: Explore Azure Network Security Groups (NSGs).

VM missing Public IP address

Lab: 05

Task: 03

Step: 03

Description of issue
The VM in the lab has no Public IP address. The template should be corrected or instructions to add it are needed.

Confidential - Financial Label does not include encryption

Lab/Demo: 13

Task: 01

Step: 04

Description of issue
The Confidential - Financial Label does not include encryption, we either need to add it, or use a different label.

Onboard Community Content Link missing

Module: 03

Lab/Demo: 07

Task: 04

Step: 03

Description of issue: In lab 7 (Explore Sentinel), Task 4 Step 3, it ask in instruction to select "Onboard Community Content". This link is not avaiable anymore over community page so update the instruction. Thanks

Issue in LAB_13_explore_senstivity_labels.md

Module: 04

Lab/Demo: 13

Task: https://github.com/MicrosoftLearning/SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals/blob/master/Instructions/Labs/LAB_13_explore_senstivity_labels.md#task-1-in-this-task-you-will-gain-an-understanding-of-what-sensitivity-labels-can-do-by-going-through-the-settings-for-an-existing-sensitivity-label-that-have-been-created-and-the-corresponding-policy-to-publish-the-label

Step: 09 - In the middle of the page, notice how there are three labels already created. Select Confidential - Finance. A window opens that provides information about this label. Note how this label is set to support both encryption and content marking. Select Edit Label at the top of the page to view some of the basic configuration settings.

Description of issue

We are not able to find three labels instead only two were shown as shown in the image and Confidential - finance is not available

Task: https://github.com/MicrosoftLearning/SC-900-Microsoft-Security-Compliance-and-Identity-Fundamentals/blob/master/Instructions/Labs/LAB_13_explore_senstivity_labels.md#task-2--in-this-task-you-will-go-through-the-process-of-applying-a-label-from-the-perspective-of-the-user-in-this-case-the-user-is-the-admin-and-view-the-content-marking-that-is-generated-by-the-label

Step: 01 -From the Microsoft 365 compliance center home page, select the app launcher icon, next to where it says Contoso Electronics. right click on the Word icon and select Open in new tab.

Description of issue
Not able to understand this step, from where does one have to select the app launcher icon?

Can you please help us out.
Regards

Issue on DEMO_explore_sentinel.md

Lab/Demo: DEMO_explore_sentinel.md

Step: Demo part 4, step 4, point 4.

Description of issue

A sentence seems incomplete.

Repro steps:

"Any automation rule you create on this page is triggered by the analytics rule you are c Note that you can add conditions and set actions for the rule."

Unable to find my Unique Tenant ID

Module: 00

Lab/Demo: 00 Setup

Task: 00

Step: 00

Description of issue

Unable to find my Unique Tenant ID and my Lab hosting provider does not have a copy of this either.

Lab: Explore sensitivity labels in Microsoft Purview

QA noted the following issues with the exercise titled Explore sensitivity labels in Microsoft Purview

Task 1, step 4: Highly Confidential does not contain All Employees, but you can find All Employes under Confidential

Task 1, step 5: There is no option for Label policies

Task 1, step 6: There is no Global sensitivity label policy (there is a Highly Confidential policy)