Validates expert knowledge of designing Zero Trust strategy, security operations, identity, compliance, and infrastructure, application and data security.
SC-100 tests whether you can choose the right security design for a business scenario, not how to configure a product. Study Microsoft's reference frameworks, review the products across all security areas, and practise case studies that ask for the best recommendation.
Example scenario: After a ransomware incident, leadership wants recovery to be the first priority in the new security plan. Which controls would you put first, and why?
Example scenario: A company must give contractors access to one SaaS app and one internal web app without creating full accounts. Which identity design would you recommend?
Example scenario: A manufacturer runs workloads in Azure, AWS and its own factory network. How would you give the security team one posture view?
Example scenario: Before rolling out Microsoft 365 Copilot, the CISO wants to stop it from surfacing confidential files to the wrong people. What would you assess and recommend first?
Official SC-100 study guide · Skills measured as of October 21, 2026
Choose the best answer from the options, or the stated number of answers when a question asks for more than one.
Contractors may reach company apps only from healthy devices in approved countries. Which control should the architect recommend?
A. Conditional Access evaluates the device and location at sign-in. The other options do not check who is signing in or from where.
Move items from a list into the correct places, such as matching items to targets or putting steps in order.
Drag each goal to the control that best meets it.
Recover files → immutable backups; stop movement between servers → network segmentation; limit a stolen admin account → just-in-time privileged access.
Choose the correct option for each part of an exhibit or statement list, often Yes or No for each statement.
For each statement, select Yes or No.
Yes, Yes, No. Purview Audit records user and admin activity; it does not isolate machines.
Read one scenario with its background, requirements and exhibits, then answer several questions about it.
Case study: A retailer runs store apps in Azure and payment systems on premises. Requirement: one place to see security alerts from both. Question 1 of 4: Which service should hold the central alert queue?
A. Microsoft Sentinel is a cloud SIEM that collects alerts from Azure and on-premises sources into one queue.
You can book SC-100 at any time. Sign in to Microsoft Learn with a personal Microsoft account and schedule with Pearson VUE from the exam page.
This plan covers SC-100 only. Read the skills list and take the free practice assessment, then study Microsoft's reference frameworks and the products outside your own specialty.
Most candidates spend 50–90 hours. Plan for the low end if you already design security across identity, operations and infrastructure; add time if you have worked in only one of those areas.
Use the official course and Microsoft's reference architectures. The exam rewards knowing when to recommend a product.
Best free courseSC-100 course on Microsoft Learn
Best paid courseSC-100 Microsoft Cybersecurity Architect course with simsBest for depthSC-100: Microsoft Cybersecurity Architect ExpertThink like an architect. For each product, learn which requirement makes it the right recommendation and which alternative it beats.
Take Microsoft's free practice assessment first, then a fuller question set. Review why each wrong option does not meet the requirements.
See all 2 SC-100 practice tests →Choose the checklist for your test-centre or online appointment.
One passer describes a case study full of requirements and advises skimming it once, then rereading the relevant part for each question.
Candidates describe SC-100 as choosing when to use the technologies from SC-200, SC-300 and SC-500, rather than operating them.
One 2026 passer missed narrowly on the first attempt, then passed on the second by slowing down and focusing on why one control fits better than another.
