Microsoft SC-100: Application Security in the Microsoft Cloud
Application security in the Microsoft cloud is not a single product decision. It is a lifecycle problem that begins with architecture and continues…
Read articleEDITORIAL TOPIC / EXAMTOPICS EDITORIAL
Cybersecurity.
Identity, secure architectures, threats, vulnerabilities and defensive operations.
PUBLISHED COVERAGECurated by subject
Microsoft SC-100: AI Security & Governance in Microsoft Environments
AI security architecture in Microsoft cloud AI security in a Microsoft environment is not a new control category that sits beside identity, data,…
Read articleMicrosoft AZ-500: After AZ-500: Microsoft’s Security Path
The Microsoft AZ-500 exam and Azure Security Engineer Associate certification retired on August 31, 2026. For candidates who had built a security plan…
Read articleMicrosoft SC-300: Lifecycle Workflows for Joiners, Movers & Leavers
Identity lifecycle problems are rarely caused by a lack of accounts. They are caused by accounts and permissions that arrive too late, remain…
Read articleMicrosoft SC-300: Entra ID Governance with Access Reviews
Microsoft Entra access reviews turn an uncomfortable identity question into a repeatable control: does this person still need this access? Without a review…
Read articleMicrosoft SC-300: Conditional Access Design for Real Organizations
Conditional Access is most effective when it behaves like a small, understandable security architecture rather than a collection of one-off exceptions. Microsoft Entra…
Read articleMicrosoft SC-300: B2B Collaboration and Cross-Tenant Access
Microsoft Entra B2B collaboration solves a common enterprise problem: people outside the home tenant need access to resources without becoming unmanaged local identities.…
Read articleMicrosoft SC-300: Phishing-Resistant MFA & Authentication
Multifactor authentication is now a baseline control, but not every MFA method offers the same resistance to modern attacks. Push approvals, SMS codes,…
Read articleMicrosoft AB-900: Identity & Access for Microsoft 365 Agents
Microsoft 365 agents can make enterprise information and business actions easier to reach, but they do not remove the need for identity architecture.…
Read articleMicrosoft AZ-104: Managed Identities for Azure Workloads
Managed identities let Azure workloads authenticate to services that support Microsoft Entra ID without storing an application password, certificate, or account key in…
Read articleMicrosoft AZ-305: Multi-Tenant Identity Design in Azure
Multi-tenant identity design is difficult because the word “tenant” can describe two different things. In a SaaS application, a tenant is usually a…
Read articleMicrosoft AZ-104: Managed Identity Failures: Tokens, Azure RBAC, and Network Diagnosis
Managed identity problems cross four different boundaries Managed identity replaces stored application credentials with an Azure-managed Microsoft Entra principal. It does not itself…
Read articleMicrosoft AZ-104: Azure Storage Access with SAS and Entra ID
Azure Storage gives administrators several ways to authorize data access, and the most important design choice is whether the caller should authenticate as…
Read articleZscaler ZDTE: Zero Trust Access Architecture with Zscaler
Zero trust access replaces broad network trust with policy decisions about a specific user, device, application, and session. The current Zscaler Digital Transformation…
Read articleIAPP AIGP: AI Governance Programs for Privacy and Risk Teams
AI governance becomes operational when an organization can identify where AI is used, classify the resulting risk, assign accountable owners, apply controls across…
Read article