Microsoft Certified: Cybersecurity Architect Expert (SC-100)
Validates expert knowledge of designing Zero Trust strategy, security operations, identity, compliance, and infrastructure, application and data security.
Summary
SC-100 is Microsoft's expert certification for cybersecurity architects who design security across a Microsoft environment. It tests Zero Trust strategy and design for identity, security operations, compliance, infrastructure, applications, data and AI, and it builds on an associate-level Microsoft security certification.
Good fit if
You hold, or are working toward, SC-300, SC-200 or SC-500
You design security across identity, data, apps and infrastructure
You target security architect roles at Microsoft-based employers
Look elsewhere if
You have no Microsoft security associate certification yet: SC-300, SC-200 or SC-500
You must earn one of these three associate certifications as well as passing SC-100.
Identity and Access Administrator Associate
SC-300
Security Operations Analyst Associate
SC-200
Cloud and AI Security Engineer Associate
SC-500
Expert skills in at least one security area
Recommended
Microsoft expects implementation experience across identity, platform protection, security operations, data and AI, applications and hybrid infrastructure, with expert skills in at least one.
You can take SC-100 before or after the associate exam. Microsoft awards the Expert certification once you have both.
Cost
USD · US pricing
$165
$165
What holders say
Most useful in Microsoft-heavy security teams
Candidates working in Azure and Microsoft 365 security call SC-100 a useful next step that matches their daily tools. Compared with CCSP, it looks narrower outside Microsoft shops.
A candidate who passed SC-100 as their 16th Microsoft exam in 28 months drew wide agreement that constant certification chasing leads to fatigue without a matching payoff.
Cybersecurity Architect Expert is valid for one year.
Validity
1 year
Renewal requirement
Free online assessment
Renewal fee
$0 USD
The renewal assessment opens six months before expiry. It is unproctored, open book and shorter than the exam, and you can retake it. Passing extends the certification by one year from the expiry date.
Can I take SC-100 before SC-200, SC-300 or SC-500?
Yes. You can take SC-100 at any time. Microsoft awards the Cybersecurity Architect Expert certification once you have passed SC-100 and earned one of SC-300, SC-200 or SC-500.
What changes on SC-100 on October 21, 2026?
The English exam moves to an updated skills list. The changes are minor, in security operations and Microsoft 365 security, and the four skill areas and weights stay the same. Other languages update about eight weeks later.
How much does the Cybersecurity Architect Expert cost?
$330 in the US for the full route, $165 for the associate exam and $165 for SC-100. If you already hold a qualifying associate, you pay only $165.
Is the SC-100 exam hard?
Pass reports call it one of the tougher Microsoft exams. The case studies and the breadth across identity, operations, infrastructure and data are the main challenges.