SC-200
Microsoft Security Operations Analyst
Microsoft
Exam facts
- Length on exam day: 120 minutes
- Questions on exam day: 40–60
- Passing score: 700 / 1000
- Practice access: $29 for 6 months
About this exam
Security operations practice for threat protection, Microsoft Sentinel, Defender XDR, and incident response workflows.
Suggested study plan
Study log ingestion and KQL in Sentinel, then alert tuning and automation. Review Defender for Cloud and endpoint signals and document response playbooks.
Domains
- Mitigate threats using Microsoft security solutions30%
- Configure and manage Microsoft Sentinel35%
- Investigate and respond to security incidents35%
FAQ
- How many questions are in the practice bank?
- The bank grows with each release. Check the count shown on this exam page.
- Are these questions from the live exam?
- No. They are original practice items aligned to the vendor’s published exam objectives.