Microsoft Security Operations Analyst Associate
The SC-200 exam is designed for professionals who implement and configure Security. It validates your ability to manage a security operations environment, configure protections and detections, manage incident response, and manage security threats using Microsoft Sentinel.
Exam details
- Certification
- Microsoft Security Operations Analyst Associate
- Exam code
- SC-200
- Level
- Associate
- Duration
- Approximately 100 minutes
- Questions
- Typically 40–60 questions
- Passing score
- 700 out of 1000
- Cost
- USD $165 — typical price; the exact fee varies by country/region and currency, and local taxes may apply.
- Prerequisites
- None required
- Languages
- English (also available in Japanese, Korean, French and German, and several other languages)
- Delivered by
- Pearson VUE
- Renewal
- Free online assessment, every 12 months
Skills measured
- Manage a security operations environment
- Configure protections and detections
- Manage incident response
- Manage security threats using Microsoft Sentinel
Study resources & practice tests
Disclosure: some links below are affiliate links. If you buy through them we may earn a commission, at no extra cost to you. Read our affiliate disclosure.
Frequently asked questions
Who should take SC-200?
SC-200 is aimed at security operations analysts who reduce organisational risk by performing triage, responding to incidents, hunting for threats and engineering detections. It suits SOC analysts and security professionals who work day to day with Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID and Microsoft Defender for Cloud across multi-cloud and on-premises environments.
How to prepare for SC-200?
Combine the free Microsoft Learn learning paths with the official SC-200 skills measured study guide, then practise in Microsoft Sentinel and Defender environments. Weight study time toward the skills measured domains, and use the study resources below before you book. Confirm readiness with a reputable practice test if available; avoid dumps sites.
How to register for the SC-200 exam?
You book the exam from the official Microsoft certification page, which schedules it through Pearson VUE. You can sit it online with remote proctoring from home or at a test centre. Pick the date and delivery option that suits you when you register.
What is the retake policy if I fail SC-200?
If you don't pass on your first attempt, you must wait 24 hours before retaking. After a second failure you must wait 14 days, with the same 14-day wait before each further attempt. You may take the exam a maximum of five times within a 12-month period, and the exam fee applies to each attempt.