thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Microsoft · Cybersecurity · Expert

Microsoft Cybersecurity Architect Expert exam guide

Exam SC-100

SC-100: Microsoft Cybersecurity Architect earns Cybersecurity Architect Expert. It validates designing Zero Trust security strategies across identity, security operations, compliance, infrastructure, applications, data and AI using Microsoft security frameworks.

QuestionsSee official page
Time limit100 minutes
Passing score700 (1-1000 scale)
Exam fee$165 USD
Valid for1 years
DeliveryPearson VUE test center or online proctored

Format: Multiple choice, drag-and-drop, hot area, build list and case studies; may include labs (120 minutes if labs are included). Fee note: US price; varies by country. Student and Microsoft Learn challenge discounts sometimes available.

Who it's for

Senior security engineers moving into architecture who have expert skills in at least one security area and broad Microsoft security experience.

What the exam covers

Design solutions that align with security best practices and priorities (20-25%)—
Design security operations, identity, and compliance capabilities (25-30%)—
Design security solutions for infrastructure (25-30%)—
Design security solutions for applications and data (20-25%)—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: Pass SC-100 and hold one of: Identity and Access Administrator Associate (SC-300), Security Operations Analyst Associate (SC-200), or Cloud and AI Security Engineer Associate (SC-500).

Recommended: Experience across identity and access, platform protection, security operations, data and AI security, application security and hybrid/multicloud infrastructure.

Keeping it active

Role-based certifications are valid 1 year. Renew free by passing an unproctored online renewal assessment on Microsoft Learn in the 180 days before expiry; no fee and no retest required.

Skills & careers

Skills it validates

  • Applying the Microsoft Cybersecurity Reference Architectures and MCSB
  • Zero Trust strategy design
  • Designing SecOps with Sentinel and Defender XDR
  • Identity and privileged access architecture
  • Infrastructure and multicloud posture design
  • Application, data and AI workload security design
  • Ransomware resiliency planning

Job roles

Cybersecurity ArchitectSecurity ArchitectCloud Security ArchitectZero Trust ArchitectPrincipal Security Engineer

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Read the SC-100 study guide; confirm your prerequisite associate cert
  2. Week 2: Frameworks - MCRA, Microsoft cloud security benchmark, Well-Architected security, Cloud Adoption Framework
  3. Week 3: SecOps, identity and compliance design (largest domains)
  4. Week 4: Infrastructure and multicloud - Defender for Cloud, CSPM, hybrid
  5. Week 5: Applications, data and AI security design; case-study practice
  6. Week 6: Practice assessment and review of reference architecture diagrams

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Think like an architect: answers align to frameworks (MCRA, MCSB, Zero Trust) rather than click-level steps
  • Case studies dominate - read requirements, then map each to a framework principle
  • Know which framework addresses which question (CAF for adoption, WAF for workloads, MCSB for controls)
  • Ransomware resiliency and AI workload security design are explicit objectives - review Microsoft guidance on both

Key terms for this exam

All 22 terms Study with thinQcards™

Commonly confused on this exam

Frequently asked questions

What are the SC-100 prerequisites?

One of SC-200, SC-300 or SC-500 certifications, plus passing SC-100.

Does AZ-500 still count as a prerequisite?

Microsoft now lists Cloud and AI Security Engineer Associate (SC-500); check your transcript and the certification page if you hold the older Azure Security Engineer Associate.

How much is SC-100?

$165 USD in the United States.

Is SC-100 hard?

Yes - it is expert level and conceptual, testing design choices across the entire Microsoft security stack.

SC-100 vs CISSP?

SC-100 is Microsoft-specific architecture; CISSP is vendor-neutral management and architecture. They complement each other.

Official page: learn.microsoft.com. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.