MOC Security

SC-200 Microsoft Security Operations Analyst

0.0

(0)

09 Labs

This track consists of 9 labs, each provided as a separate lab instance, and has to be completed in one uninterrupted session. Once you launch a lab, your session begins. The estimated duration to complete each lab is around 2 hours. This track and all associated labs will be available for 30 days once you redeem the voucher code. After 30 days, all the labs will be automatically deleted from the CloudLabs portal.

Santoshi Kumari

About Course

The SC-200: Microsoft Security Operations Analyst course provides an introduction to threat detection, investigation, and response using Microsoft Sentinel, Microsoft Defender XDR, and Microsoft Defender for Cloud. It covers configuring Sentinel, connecting data sources, and using Kusto Query Language (KQL) for security analytics. The course includes hands-on labs focused on real-world scenarios such as threat mitigation, log analysis, and threat hunting. This course is suitable for individuals in security operations roles and helps prepare for the Microsoft Certified: Security Operations Analyst Associate certification.

Create detections and perform investigations using Microsoft Sentinel and Perform threat hunting in Microsoft Sentinel
Connect logs to Microsoft Sentinel
Configure your Microsoft Sentinel environment
Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
Mitigate threats using Microsoft Defender for Cloud
Mitigate threats using Microsoft Defender for Endpoint
Explore Microsoft Purview Audit logs
Explore Microsoft Security Copilot
Mitigate threats using Microsoft 365 Defender