Microsoft Security

Operations Analyst
Introduction

© Copyright Microsoft Corporation. All rights reserved. Date

Hello! Trainers:
Customize this content with your
Thank you for joining me today information, image, and
background. Delete this note
before publishing.

Instructor: <Name>
<Title or other credentials, e.g., Microsoft Certified Trainer>

<Affiliation/Company>

<A few words about my technical and professional experience>

twitter.com/[Name]
linkedin.com/[Name]
[first.last]@[email.com]
Blog

© Copyright Microsoft Corporation. All rights reserved.

Let’s get to know
each other

Your name
Company affiliation
Title/function
Your experience
Your expectations
for the course

© Copyright Microsoft Corporation. All rights reserved.

Let’s have a great time together Trainers:
Customize this slide for your
course. Delete this note before
publishing.

We all contribute to a great class What you should know about our facilities

• This placeholder is designed with • This placeholder is designed with

bulleted text bulleted text
• It’s easy to remove or add bullets • This section can be removed if the class is
• Be on time (class hours) online
• Be present (avoid mail, calls, side meetings) • Accommodations
• Internet access
• Parking
• Restrooms
• Emergency

© Copyright Microsoft Corporation. All rights reserved.

About this course

Overview

• Learn how to investigate, respond to, and hunt for threats using Microsoft Sentinel, Microsoft Defender for
Cloud, and Microsoft Defender XDR. In this course you will learn how to mitigate cyberthreats using these
technologies. Specifically, you will configure and use Microsoft Sentinel as well as utilize Kusto Query
Language (KQL) to perform detection, analysis, and reporting.

Learners should have the following prerequisite knowledge for this course:

• Familiarity with the Microsoft Azure portal and

• Basic understanding of Microsoft Defender
services, specifically Azure Monitoring and Azure Log
• Fundamental understanding of Microsoft security,
Analytics
compliance, and identity products
• Familiarity with Azure virtual machines and virtual
• Intermediate understanding of Windows 11.
networking
• Basic understanding of scripting concepts.

© Copyright Microsoft Corporation. All rights reserved.

Course schedule
Trainers:
Find the proposed schedule in
Day 1 Day 2 Day 3 Day 4 Prep Guide (PDF) and
the Trainer
customized if needed. Delete this
Short topic description. Lorem ipsum note before publishing.
dolor sit amet, consectetur adipiscing
Early morning elit, sed do eiusmod tempor
incididunt ut labore et dolore magna
aliqua.

Break

Short topic description. Lorem ipsum

dolor sit amet, consectetur adipiscing
Late morning elit, sed do eiusmod tempor
incididunt ut labore et dolore magna
aliqua.

Lunch

Short topic description. Lorem ipsum

dolor sit amet, consectetur adipiscing
Early afternoon elit, sed do eiusmod tempor
incididunt ut labore et dolore magna
aliqua.

Break

Short topic description. Lorem ipsum

dolor sit amet, consectetur adipiscing
Late afternoon elit, sed do eiusmod tempor
incididunt ut labore et dolore magna
© Copyright Microsoft Corporation. All rights reserved.
aliqua.
Get the most out of your Create your Microsoft Learn profile
Microsoft Learn profile at learn.microsoft.com
• Select Sign in at the top, right corner of any
Microsoft Learn page.
Verify, track, and share your training and certification • Follow the Microsoft account authentication process.
• If the account that you have chosen to sign-in with
progress and accomplishments—all on one platform doesn't already have a Microsoft Learn profile, you’ll
be guided to create one.

• Claim your achievement code for this course and share

you have completed it.
• Access your course material and track progress on your
learning activities.
• Share and verify your Microsoft Certifications via email, on
social networking platforms, and on your résumé.
• Download and print transcripts and certificates.
• Manage your upcoming activities and certification exam
appointments.

www.aka.ms/MyMicrosoftLearnProfile

© Copyright Microsoft Corporation. All rights reserved.

 Access your course material
All course content is available on Microsoft Learn

learn.microsoft.com/training/courses/browse This course includes labs:

• Detailed lab instructions are included

in your lab environment.
• We’ll go through this content together
and, as the course progresses, I will advise
you on which modules to review.
• You can provide feedback for modules on
Microsoft Learn. Find out how at the https://aka.ms/sc200labs
bottom of each page.

Need help? See our troubleshooting guide or provide feedback for Microsoft Learn content

© Copyright Microsoft Corporation. All rights reserved.

Celebrate your accomplishments
and feel empowered
Get your achievement recognized and earn
aka.ms/MyMicrosoftLearnProfile
your badge for completing this course

1. Go to Achievements on your Microsoft Learn profile

3
2. Redeem the code provided by your trainer
3. Find your new badge on Modules, Courses & More
4
4. Share your new achievement with your professional
1 network. You can also download and print your
certificate.

© Copyright Microsoft Corporation. All rights reserved.

Become 92 %
Microsoft Certified of certified IT professionals feel more confident
in their abilities after earning certifications¹

Get recognized by earning industry validation for Microsoft role-based and specialty certifications
technical knowledge. Ensure you stay current with the require annual renewal.2
necessary skills and expertise for continued success​.
Learn about certification renewal at aka.ms/
Start at learn.microsoft.com/certifications RenewYourCert

¹ “2023 Value of IT Certification | Candidate Report,” Pearson VUE, 2023 2

Microsoft fundamentals certifications don’t expire

© Copyright Microsoft Corporation. All rights reserved.

Get ready for your Microsoft Certification exam
Exam SC-200: Security Operations Analyst covers the features and capabilities of Microsoft Defender
XDR, Microsoft Defender for Endpoint, Microsoft Defender for Cloud and Microsoft Sentinel.

Understand the skills measured by the exam Build confidence in your skills

Study area Percentage

Find in the exam page resources
to help prepare
Manage a security operations environment 20-25%
• Watch exam prep videos
• Review the exam study guide
Configure protections and detections 15-20%
• Demo the exam experience with the exam sandbox
• Take a practice assessment
Manage incident response 35-40%

Perform threat hunting 15-20%

Percentages indicate the relative weight of each area on the exam

The higher the percentage, the more questions you are likely to see in that area

© Copyright Microsoft Corporation. All rights reserved.