Azure SC-200 Security Operations Analyst Guide 2026
Master Microsoft Sentinel, Defender XDR, and threat hunting. Complete guide for the Security Operations Analyst certification.
What is SC-200?
The SC-200: Microsoft Security Operations Analyst certification validates your skills in threat detection, investigation, and response using Microsoft security solutions. This associate-level certification is ideal for SOC analysts working with Microsoft Sentinel and Defender.
Quick Facts
- Exam Code: SC-200
- Duration: 120 minutes
- Questions: 40-60 questions
- Passing Score: 700/1000
- Cost: $165 USD
- Prerequisites: SC-900 recommended
Exam Domains & Weightings
25-30%Mitigate threats using Microsoft Defender XDR
15-20%Mitigate threats using Microsoft Defender for Cloud
50-55%Mitigate threats using Microsoft Sentinel
Key Topics to Master
1. Microsoft Defender XDR
- Defender for Endpoint configuration
- Defender for Office 365
- Defender for Identity
- Incident investigation workflows
2. Defender for Cloud
- Security posture management
- Workload protection
- Alert investigation
- Regulatory compliance
3. Microsoft Sentinel
- Workspace configuration
- Data connectors setup
- KQL query writing
- Analytics rules creation
- Playbook automation
- Threat hunting techniques
🎯 Related Practice Exams
Prepare with free practice questions on ExamCert:
Ready to Pass SC-200?
Practice with 500+ security operations exam questions.
Start Free Practice Test100% Money-Back Guarantee if you don't pass
Plan Your Study Journey
Use our free tools to optimize your preparation