Microsoft Cybersecurity Architect Expert (SC-100)

The SC-100 exam is designed for cybersecurity architects who design security solutions for identities, operations, infrastructure, applications, and data. It validates your ability to design solutions that align with security best practices and priorities, design security operations, identity, and compliance capabilities, design security solutions for infrastructure, and design security solutions for applications and data.

Exam details

Certification
Microsoft Cybersecurity Architect Expert
Application
Microsoft Security
Exam code
SC-100
Level
Expert
Duration
Approximately 100 minutes
Questions
Typically 40–60 questions
Passing score
700 out of 1000
Cost
USD $165 — typical price; the exact fee varies by country/region and currency, and local taxes may apply.
Prerequisites
None required
Languages
English (also available in Japanese, Korean, German and French, and several other languages)
Delivered by
Pearson VUE
Renewal
Free online assessment, every 12 months

Skills measured for the upcoming exam version

Design solutions that align with security best practices and priorities

20–25%
  • Design resiliency and ransomware response, including BCDR and privileged access.
  • Align designs with MCRA, MCSB, Zero Trust, and secure AI benchmarks.
  • Design CAF, Well-Architected, landing zone, and DevSecOps security strategies.
Practice Security Best Practices Questions

Design security operations, identity, and compliance capabilities

25–30%
  • Design XDR, SIEM, SOAR, logging, threat hunting, and MITRE ATT&CK coverage.
  • Design Entra ID, agent identities, Conditional Access, privileged access, and secrets.
  • Translate compliance requirements into Purview, Azure Policy, and Defender for Cloud controls.
Practice Operations, Identity & Compliance Questions

Design security solutions for infrastructure

25–30%
  • Design hybrid and multicloud posture management with Defender for Cloud, Arc, and EASM.
  • Specify security for servers, endpoints, IoT, OT, SaaS, PaaS, IaaS, and containers.
  • Evaluate network security and Security Service Edge with Entra Internet Access and Private Access.
Practice Infrastructure Security Questions

Design security solutions for applications and data

20–25%
  • Evaluate Microsoft 365 security posture, Defender, Intune, Purview, and Copilot data controls.
  • Design application security, threat modelling, workload identities, APIs, and WAF.
  • Design data discovery, encryption, Key Vault, and Defender for Storage and Databases.
Practice Applications & Data Security Questions

Study Resources

Frequently asked questions

Who should take SC-100?

SC-100 is for cybersecurity architects, security architects, and senior cloud security leads. Most work in banks, government, large enterprises, and security consultancies. Microsoft awards it after an associate security certification such as SC-200 or SC-300.

What is the average salary for a Cybersecurity Architect?

Pearson Carter's 2026 Cloud, DevOps & Security salary guide benchmarks U.S. Security Architect salaries at $176,000 lower, $203,000 midpoint, and $242,000 upper. The guide uses the adjacent Security Architect title; actual pay varies by experience, location, and employer.

How should I prepare for SC-100?

Access the free SC-100T00 Course on Microsoft Learn. Then, use our SC-100 Exam Practice Test, which includes original questions we developed to help you memorise and retain the course content.

Avoid exam dumps: using them can invalidate your score, revoke certifications you already hold, and bar you from future exams.

Search the Microsoft Training Services Partners directory for instructor-led options. Separately, current U.S. listings for four-day SC-100T00 courses quote $2,250 at Koenig Solutions and $2,375 at TechSherpas.

Does the exam include official labs I can use to practice?

If you purchase instructor-led training, Microsoft Training Services Partners usually provide access to official labs for about 90 days. Always check that the labs are from a Microsoft partner such as Skillable.

Depending on the exam, a trial licence could include demo data to practise with, but this is not guaranteed and Microsoft often changes its policies about free trials with demo data. If you prefer hands-on learning using labs, contact a Microsoft Training Services Partner for instructor-led training.

← More Microsoft Security training & guides