SC-200 Labs

Applied Skills

Note

Applied Skills on Microsoft Learn are practical, hands-on exercises designed to help users build and demonstrate proficiency in specific technologies or tasks. These small labs focus on solving real-world scenarios, reinforcing learning through direct application of skills, and preparing users for industry roles or certifications.

Defend against cyberthreats with Microsoft Defender XDR

Prepare security and compliance to support Microsoft 365 Copilot

Implement information protection and data loss prevention by using Microsoft Purview

Configure SIEM security operations using Microsoft Sentinel

Microsoft Learn

Note

Microsoft Learn sandboxes are interactive, temporary environments provided by Microsoft Learn that allow users to practice and explore Azure services and other Microsoft technologies without needing their own subscription. These sandboxes are free, time-limited, and isolated, offering a secure space to complete guided learning modules, tutorials, and hands-on exercises in a real-world setup.

Occasionally, they require you to bring your own subscription or run the exercises locally on your computer.

Caution

Be careful of starting multiple sandboxes/visiting multiple sandbox URLs at the same time as Microsoft Learn might suspend your access due to detected suspicious activity.

Exercise configure Microsoft Entra multifactor authentication registration policy

Exercise enable sign-in risk policy

Microsoft GitHub

Note

Microsoft GitHub labs are series of labs designed to be used in Microsoft Instructor Lead Trainings delivered by Microsoft Certified Trainers where participants also have access to the environment to perform them. This means that for everyone else, it is necessary to bring your own environment to go through them.

Explore Microsoft Defender XDR

Explore use cases in Microsoft Security Copilot

Explore Microsoft Purview Audit logs

Deploy Microsoft Defender for Endpoint

Mitigate Attacks with Microsoft Defender for Endpoint

Enable Microsoft Defender for Cloud

Mitigate threats using Microsoft Defender for Cloud

Create queries for Microsoft Sentinel using Kusto Query Language (KQL)

Configure your Microsoft Sentinel environment

Connect data to Microsoft Sentinel using data connectors

Connect Windows devices to Microsoft Sentinel using data connectors

Connect Linux hosts to Microsoft Sentinel using data connectors

Modify a Microsoft Security rule

Create a Playbook

Create a Scheduled Query from a template

Explore Entity Behavior Analytics

Prepare to perform simulated attacks

Conduct attacks

Create Detections

Investigate Incidents

Create ASIM parsers

Create workbooks

Use Repositories in Microsoft Sentinel

Perform Threat Hunting in Microsoft Sentinel

Threat Hunting using Notebooks with Microsoft Sentinel

Guided Labs

Note

Guided labs are short interactive videos that offer a free way to get familiar with the products being presented. They aren’t as good as actually using the products but they provide a safe way to practice without the risk of messing something up or running up a bill.

Create an endpoint device group in Microsoft 365 Defender for devices that start with 'NYC'

Assign JC to the Microsoft Sentinel Contributor role

Configure the Microsoft Entra ID data connector with Sign-In Log and Audit Log support

Turn on automatic onboarding of servers for Defender for Endpoint using Defender for Cloud

Create an alert policy, high severity, information governance, malware in a file

Create an incident creation rule for Defender for Identity that has alert text 'account disabled'

Create a safe attachment policy for Sales with Dynamic Deliver & redirect to [email protected]

Create a custom DLP policy that uses Payroll Keyword sensitivity info type. Enable user notifications

Perform an audit search in Purview for the first 5 listed Exchange activities for JC's email

Configure the Medium 'Malicious Inbox' incident. Set to High, Active, and assign JC

Setup a Copilot for Security compute capabilities resource with 2 Security Compute Units (SCUs)

Select the Malicious Keyword Query in Hunting. Create a bookmark from the first entry. Do Livestream