SC300 Study Cram: Microsoft Identity and Access Administrator Exam

Introduction

• Focus on Azure Active Directory (AD)
• Importance of understanding identity as the front door and first perimeter
• Recommended resources:
  • Microsoft exam page for SC300
  • Exam skills outline
  • Free training paths

Azure Active Directory Overview

• Azure AD as an identity provider in the cloud
• Tenant concept: unique instance of Azure AD
• Custom domain names and DNS verification
• Azure AD Portal for management

Azure AD Connect

• Synchronizing on-premises Active Directory with Azure AD
• Azure AD Connect and Azure AD Connect Cloud Sync
• Connector spaces for import/export
• Metaverse for synchronization
• Hard match vs. soft match for pre-existing Azure AD objects
• Password hash synchronization benefits

Authentication Methods

• Cloud Authentication (preferred)
• Pass-through authentication
• Federation services (e.g., ADFS)
• Passwordless authentication and MFA

Monitoring Health

• Azure AD Connect Health for monitoring domains, AD Connect, and ADFS
• Outbound 443 connections to Azure

Users and Groups Management

• Cloud accounts vs. synced accounts
• Guest users and their identity issuers
• Dynamic groups and membership rules
• Licensing and roles assignments
• Tombstone state for deleted users

Roles and Administrative Units

• Azure AD roles and their scope
• Role assignments to users and groups
• Custom roles limited to app management
• Administrative units for role delegation

Device Management

• Device types: personal, corporate, hybrid joined
• Azure AD registration and join
• Mobile device management (MDM) via Intune

Authentication Methods

• MFA methods: SMS, voice, authenticator app, OTP
• Self-service password reset (SSPR) and password protection

Conditional Access

• Superhero feature of Azure AD
• P1 and above feature
• Security defaults for free tier
• Signals: user, location, application, device
• Decisions: block, allow, MFA requirement

Cross-Tenant Access Settings

• Preview feature
• Managing inbound and outbound access

Defender for Cloud Apps

• Cloud access security broker (CASB) capability
• Discovery of shadow IT
• API connectors and network device logs

Enterprise Applications

• Single sign-on (SSO) methods: SAML, OIDC, OAuth 2.0
• System for Cross-Domain Identity Management (SCIM)
• App proxy for on-premises applications
• App registrations for custom applications

Entitlement Management

• P2 feature
• Access packages for grouping resources
• Lifecycle policies and access reviews

Privileged Identity Management (PIM)

• Just-in-time access
• Eligible vs. active roles
• Azure AD and Azure Resource Manager roles

Conclusion

• Practice and hands-on learning
• Prepare for exam structure and questions
• Stay calm and review weaker areas if needed

These notes provide a high-level overview and important details for the SC300 Microsoft Identity and Access Administrator Exam based on the lecture content. They are intended as a study aid and a quick reference to key concepts and best practices.