Practice
Learn at your own pace. Answer questions one at a time with instant feedback and explanations.
Start practiceMicrosoft Cybersecurity Architect
SC-100 validates the skills of a cybersecurity architect who designs and evolves an organization's cybersecurity strategy using Zero Trust principles. It covers security best practices, security operations, identity and compliance, infrastructure security, and application and data security across hybrid and multicloud environments. Passing SC-100 (with a prerequisite associate certification) earns the Microsoft Certified: Cybersecurity Architect Expert certification.
Mock exam
Simulate the real thing. Take a timed, full-length test and review your score and weak areas.
Sign up to startStudy your way: beyond Practice and Mock exam, choose adaptive, hard mode, ready review, objective coverage, or retry-your-misses — and set your own question count, timer, and pass mark.
About this exam
Exam SC-100 measures your ability to design cybersecurity solutions following Zero Trust and Microsoft security best practices: aligning with MCRA/MCSB/CAF/WAF, designing security operations, identity and compliance capabilities, infrastructure security posture, and application and data security. The skills measured reflect the outline updated April 27, 2026.
Who should take this exam
Experienced cybersecurity architects who translate security strategy into capabilities protecting identity, devices, data, AI, applications, network, infrastructure, and DevOps, and who design GRC, security operations, and posture management solutions.
Career benefits
Earning the Cybersecurity Architect Expert certification demonstrates the ability to design end-to-end security strategies across Microsoft and multicloud environments, supporting senior roles such as security architect, security consultant, and CISO-track leadership.
How to prepare
Build expertise across identity and access, platform protection, security operations, data and AI security, application security, and hybrid/multicloud infrastructure. Study the Microsoft Cybersecurity Reference Architectures (MCRA), Microsoft cloud security benchmark (MCSB), Cloud Adoption Framework, Well-Architected Framework, Zero Trust guidance, Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Entra, and Microsoft Purview. SC-100 requires a prerequisite associate certification such as SC-200, SC-300, AZ-500, or MS-500.
Quick facts
Exam cost$165 USD
Valid forOne year (renew free on Microsoft Learn)
Length120 minutes
Questions on exam50
Passing score700 / 1000
FormatMultiple choice, multiple response, drag-and-drop ordering, case studies, and design scenario items.
Practice questions150
Objectives4
Official pageView
What's covered
1. Design solutions that align with security best practices and priorities
20–25%- 1a Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices
- 1b Design solutions that align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft cloud security benchmark (MCSB)
- 1c Design solutions that align with the Cloud Adoption Framework (CAF) and the Azure Well-Architected Framework (WAF)
2. Design security operations, identity, and compliance capabilities
25–30%- 2a Design solutions for security operations
- 2b Design solutions for identity and access management
- 2c Design solutions for securing privileged access
- 2d Design solutions for regulatory compliance
3. Design security solutions for infrastructure
25–30%- 3a Design solutions for security posture management in hybrid and multicloud environments
- 3b Specify requirements for securing server and client endpoints
- 3c Specify requirements for securing SaaS, PaaS, and IaaS services
- 3d Evaluate solutions for network security and Security Service Edge (SSE)
4. Design security solutions for applications and data
20–25%- 4a Evaluate solutions for securing Microsoft 365
- 4b Design solutions for securing applications
- 4c Design solutions for securing an organization's data
Frequently asked questions
Are these real exam questions?
No. These are original practice questions written to match the exam objectives, each with an explanation so you actually learn the material — not exam dumps.
How does practice mode work?
You answer questions one at a time with instant feedback and explanations. Over time the app adapts, prioritizing the objectives and questions you struggle with most.
What is a mock exam?
A timed, full-length simulation that holds feedback until the end, then shows your score, pass/fail result, and a breakdown by objective.
Can I customize how I study?
Yes. Pick the study mode that fits — adaptive practice, hard mode, ready-for-review, objective coverage, or retrying questions you've missed — and set your own question count, timer, and passing score for each session.
Do I need an account?
You can try free questions for this exam without signing in. Create a free account to save your progress, track weak objectives, and unlock the full question bank.