Am I Ready for SC-100? Exam Readiness Checklist (2026)
Tick what you can do today, without notes. The board scores you against the Microsoft outline and says GO, HOLD or NO-GO before you spend US$165 on a booking.
- Not publishedQuestions
- 100-120 minTime
- 700 / 1000Pass mark
- US$165Fee
- Pearson VUEDelivery
Table of Contents
SC-100 is Microsoft's expert-level security architecture exam. It is aimed at engineers who already implement identity, security operations, platform or data protection and now have to design across all of them: Zero Trust strategy, Defender for Cloud posture, Sentinel and Defender XDR operations, Purview compliance and the security of AI workloads. Passing it earns Microsoft Certified: Cybersecurity Architect Expert only when you also hold SC-200, SC-300 or the Cloud and AI Security Engineer Associate.
Ready for SC-100 does not mean you can click through portals. It means you can read a long case study, spot the requirement that actually decides the answer, and pick the Microsoft framework or product that meets it with the least disruption. If you can do most of the items below from memory and say why the alternatives lose, book it. If you still look up what MCRA, MCSB or the enterprise access model cover, you are not there yet.
How to use this checklist
Tick only what you can do today, without notes. Each tick is weighted by its domain's share of the official outline, so the score follows the exam, not the number of boxes. A heavy domain (15%+ of the weight) at NO-GO holds the verdict even when the total looks fine. Your ticks are saved in this browser only.
The SC-100 readiness checklist
20 items across 4 domains, each one a thing the exam expects you to do rather than recognise.
Your go / no-go board
One lamp per domain, one verdict overall. Amber and red rows are your study plan for the next week or two.
Check your ticks under exam conditions
A tick is a claim; a timed set of questions is the evidence. The SC-100 app has 1,100+ exam-style SC-100 questions with an explanation for every option. Do a mixed set and see whether the domains you ticked hold up.
App StoreGoogle PlayFree SC-100 practice testRed flags: don't book yet if...
Any one of these on the SC-100 is a better predictor of a fail than a low tick count.
You hold no associate-level security certification yet
SC-100 assumes expert skill in at least one area, and Microsoft only issues the Expert certification once you also hold SC-200, SC-300 or Cloud and AI Security Engineer Associate. Passing SC-100 alone adds an exam to your transcript, not a credential.
Fix:Earn the associate certification closest to your daily work first, then return to SC-100 with that depth behind you.
Case studies eat your clock in practice
SC-100 leans on long scenarios split across requirement tabs. Reading every tab end to end for every question burns time, and once you take a break you cannot return to questions you have already seen.
Fix:Read the question first, then hunt the one requirement it depends on. Time yourself on the case-study modules in Microsoft Learn's SC-100 learning paths.
You can name the frameworks but not choose between them
Questions rarely ask what MCRA, MCSB, CAF or the Zero Trust adoption framework are. They ask which one answers a stated requirement, and every distractor is a real Microsoft product or framework.
Fix:Write one line per framework: what it decides, who uses it and which product proves it. Repeat until you can do it from memory.
Your practice result hides a weak heavy domain
A decent overall score can mask a weak operations-and-identity or infrastructure domain, and each of those carries 25-30% of the exam.
Fix:Retake Microsoft's free SC-100 Practice Assessment after targeted study and read the per-domain breakdown, not only the total.
You plan to look everything up on Microsoft Learn
A Learn pane is available in role-based exams, but no time is added and the clock keeps running. Microsoft warns that using it on every question will leave you unable to finish.
Fix:Save Learn for a single fact you can find in under a minute, such as a plan's coverage. Practise navigating the Defender for Cloud and Entra docs.
The numbers that say you're ready
Rules of thumb, not official thresholds: Microsoft does not publish a readiness score. Hit all four before you pay for a booking.
Rule of thumb, not an official cut score. The free assessment draws from a pool, so two strong attempts on different days point to understanding rather than recall.
Rule of thumb. Answer every question in one Learn case-study module inside that window so a long scenario on the real exam does not swallow the time you need for the rest.
Rule of thumb for an architecture exam: on a random design question you should be able to say which stated requirement each wrong option breaks, not just why the right one fits.
Rule of thumb. Operations-and-identity and infrastructure carry 25-30% each, so a gap there costs more than the same gap in a 20-25% domain.
Booking and ID checklist
The logistics that trip people up are specific to the SC-100 and its delivery provider. Work through them in order.
Set up your certification profile
Sign in to Microsoft Learn with a personal Microsoft account; Microsoft warns that records on a work or school account can be lost if you leave. Make the profile name match your government ID exactly.
Confirm your prerequisite certification
Check that you hold, or will soon earn, SC-200, SC-300 or Cloud and AI Security Engineer Associate. Without one, passing SC-100 does not award Cybersecurity Architect Expert.
Request accommodations or extra time
Accommodations must be approved before you book. SC-100 is offered in ten languages; if yours is not one of them, you can request an extra 30 minutes.
Book through Pearson VUE
Use Schedule exam on the SC-100 page and choose a test centre or online (OnVUE). The US price is US$165; other countries differ and tax may apply. Apply any voucher or Exam Replay offer at checkout.
Run the OnVUE system test
For online delivery, run Pearson VUE's system test on the same computer, network and room you will use. A personal machine with admin rights avoids corporate VPNs and security agents that block the secure browser.
Last chance to move the slot
Reschedule or cancel from your Learn profile at least 24 hours ahead. Later than that, the fee or voucher is forfeited.
Check in on time
Online, check in from 30 minutes before to 15 minutes after your start via Learn profile, Certifications, Go to the exam. At a centre, arrive early with ID whose name matches your profile.
Exam-week countdown: T-7 to T-0
Take Microsoft's free SC-100 Practice Assessment under timed conditions, list every miss by domain and reread the matching objectives in the current study guide.
Work one full Learn case-study module against the clock, then drill your one-line summaries of MCRA, MCSB, CAF, WAF and the enterprise access model until each takes under a minute.
No new topics. Rerun the OnVUE system test or check the route to the centre, confirm your ID name, clear the desk and get a full night's sleep.
In each case study read the question first, then the requirement tabs. Flag anything over two minutes and move on, and finish your current questions before taking a break, because viewed questions lock.
Test-day rules
✓ Allowed / expected
- One current government-issued photo ID whose name exactly matches your Microsoft certification profile
- The built-in Microsoft Learn pane on role-based exams, with the exam timer still running
- Unscheduled breaks through the Take a break button; the clock keeps running and 5 minutes are built into the exam time
- Pearson VUE's digital whiteboard online, or the note board provided at a test centre
- A drink in a clear, spill-proof container during an online exam
✕ Not allowed
- Phones, watches, notes, pens, paper or extra monitors within reach during an online exam
- Anyone else in the room, or help from another person or any AI tool
- Going back to questions you viewed before taking a break
- Copying, recording or sharing exam content; Microsoft can decertify and ban candidates
- Eating, smoking or chewing gum without an approved accommodation
After you pass
Score in minutes
Most Microsoft exams show pass or fail and a score report within minutes (about 30 minutes when labs are included). The report has a bar chart by skill area and reaches your Learn profile within 24 hours.
Credential in your Learn profile
If you already hold SC-200, SC-300 or Cloud and AI Security Engineer Associate, Cybersecurity Architect Expert appears under Credentials with an Online Verifiable tag, ready to share on LinkedIn or by link.
Free renewal every year
The certification lasts 12 months. In the six months before it expires, pass a free, unproctored, open-book renewal assessment on Microsoft Learn; you can retake it as often as needed before the expiry date.
The SC-100 at a glance
| Item | Detail |
|---|---|
| Questions | Not published for SC-100; Microsoft says most of its exams have 40-60 questions |
| Time | Not listed on the SC-100 page. Microsoft's duration table gives expert exams 100 minutes (120 if the form may contain labs); seat time is 20 minutes longer. Pearson VUE shows your exact time at booking |
| Passing score | 700 on a scaled 1-1,000 score (not the same as 70% correct) |
| Fee | US$165 in the United States; price varies by country or region and excludes tax |
| Delivery | Pearson VUE test centre or online proctored (OnVUE) |
| Retakes | 24 hours after a first fail, then 14 days between later attempts; no more than 5 attempts in 12 months; each retake is paid |
| Results | Pass/fail and a score report within minutes of finishing (about 30 minutes if labs are included); in your Learn profile within 24 hours |
| Validity and renewal | 12 months; renew free with an unproctored, open-book Microsoft Learn assessment in the 6 months before expiry. The Expert certification also needs SC-200, SC-300 or Cloud and AI Security Engineer Associate |
Turn the amber rows green
Work SC-100 questions by domain, starting with whatever the board marked HOLD or NO-GO, then tick again.
App StoreGoogle PlayFree SC-100 practice testFAQ
Do I need another certification before SC-100?
You can sit SC-100 without one, but Microsoft only awards Cybersecurity Architect Expert once you also hold Identity and Access Administrator (SC-300), Security Operations Analyst (SC-200) or Cloud and AI Security Engineer Associate. Until then the passed exam shows on your transcript and the certification does not. Most candidates should earn the associate first anyway, because SC-100 assumes that depth.
How many questions are on SC-100 and how long is it?
Microsoft does not publish a question count for SC-100; its general guidance says most exams have 40 to 60 questions. The SC-100 page does not list a duration either. Microsoft's duration table gives expert exams 100 minutes, or 120 minutes when the form may contain labs, plus 20 minutes of seat time for instructions and the agreement. Pearson VUE shows your exact time when you book.
Is SC-100 changing in October 2026?
Yes. The English exam switches to a revised skills outline on 21 October 2026. The four domains and their weights stay the same, and Microsoft rates the changes to the security operations and Microsoft 365 objectives as minor. Localised versions update about eight weeks later. Study from the current study guide and you are covered on either side of the date.
Can I use Microsoft Learn during the SC-100 exam?
Yes. Associate and expert role-based exams include a split-screen Microsoft Learn pane covering learn.microsoft.com, except Q&A, practice assessments and your profile. No extra time is added and the timer keeps running, so it suits checking one specific fact, not researching a whole case study. Practise finding pages in the Defender for Cloud, Sentinel and Entra docs before exam day.
What happens if I fail SC-100?
You can retake it 24 hours after a first failed attempt, then must wait 14 days between later attempts, with no more than five attempts in 12 months. Each retake is paid unless you bought an Exam Replay offer. Use the score report's bar chart to find weak skill areas; Microsoft does not reveal which questions you missed.
Sources
Figures on this page come from Microsoft and the other primary sources below:
- Exam SC-100: Microsoft Cybersecurity Architect
- Study guide for Exam SC-100
- Microsoft Certified: Cybersecurity Architect Expert
- Exam duration and exam experience
- Exam scoring and score reports
- Exam and Applied Skills retake policies
- Reschedule and cancellation policies
- About online exams with Pearson VUE
- Microsoft Certification renewal
Checked October 14, 2026. Fees, outlines and eligibility rules change — confirm with Microsoft before you book.