MB-910T00 Introduction to Microsoft Dynamics 365 (CRM)

1 – Identify Security Requirements and Expectations

• Security throughout the development process
• Business, compliance, and user requirements
• Identifying factors undermining software security
• Recognizing vulnerabilities and attack patterns
• Gathering vulnerability intelligence

2 – Handling Vulnerabilities

• Addressing software defects and misconfiguration
• Managing risks from third-party code
• Handling human factors and social engineering
• Improving development process security

3 – Designing for Security

• Applying secure design principles (OWASP, defense in depth, least privilege)
• Threat modeling and risk assessment
• Identifying and countering specific threats

4 – Developing Secure Code

• Secure coding best practices and checklists
• Avoiding common programming errors (buffer overflows, input validation, etc.)
• Preventing platform, privacy, and web/mobile vulnerabilities

5 – Implementing Common Protections

• Access control, authentication, and session management
• Protecting data in transit and at rest (encryption, PKI)
• Secure error handling, logging, and output restrictions
• Preventing SQL injection and securing database access

6 – Testing Software Security

• Security testing phases and strategies
• Static and dynamic code analysis
• Automated tools for vulnerability detection

7 – Maintaining Security in Deployed Software

• Monitoring and logging applications
• Ongoing patch management and maintenance
• Secure deprovisioning and uninstallation