Completely free
No account walls, no upsell
Free exam prep for every test — 20,000+ exam pages and 2.4M+ practice questions.
Open free SC-200 prep resources ↗Exam facts & prep options
Microsoft Certified: Security Operations Analyst Associate
Exam SC-200: Microsoft Security Operations Analyst is the Microsoft Associate-level certification exam for security operations analysts who reduce organizational risk by monitoring, investigating, and responding to threats in multi-cloud and on-premises environments using Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Purview, and Microsoft Defender for Cloud; passing it earns the Microsoft Certified: Security Operations Analyst Associate certification.
Official exam siteJump to prep options ↓
QuestionsTypically 40–60 questions; Microsoft does not publish an exact count for SC-200 and the number can vary; unscored items may be included ('Some questions on the exam may not be included in your score')
Testing time100 minutes of exam time (120-minute seat time per Microsoft's duration table for associate role-based exams without labs); five minutes of break time is built into the exam time
ScoringPassing score of 700 or greater on a 1–1,000 scaled-score scale
Exam feeUSD 165 typical for Associate/Expert exams; priced by country/region of proctoring, taxes may apply; the certification page states 'Price based on the country or region in which the exam is proctored'
Prep options
Study resources for SC-200
Independent prep
Courses and study resources
Exam overview
What to know before choosing your prep
- Who runs it
- Microsoft
- Category
- Cybersecurity
- Current version
- SC-200; skills measured as of July 28, 2026 (three areas: manage a security operations environment 40–45%, respond to security incidents 35–40%, perform threat hunting 20–25%)
- Where it applies
- Global
- Exam languages
- English, German, Spanish, French, Italian, Japanese, Korean, Brazilian Portuguese, Simplified Chinese, Traditional Chinese
- Score scale
- 1–1,000 (scaled)
- Testing provider
- Pearson VUE
- Format
- Computer-based, proctored; at a Pearson VUE test center or online with remote proctoring; may include interactive components
- Availability
- Year-round by appointment through Pearson VUE; scheduling allowed no more than 90 days in advance and a maximum of two Microsoft Certification exams scheduled at a time
- Results
- Results within minutes for most exams (exams with labs take about 30 minutes to score); score posted to the Microsoft Learn profile within 24 hours
- Remote testing
- Available
Exam structure
Single exam across three skills-measured areas: Manage a security operations environment (40–45%), Respond to security incidents (35–40%), and Perform threat hunting (20–25%); question types are not disclosed in advance and the exam may include interactive components ('You may have interactive components to complete as part of this exam')
Where rules vary
Vendor certification exam delivered worldwide through Pearson VUE test centers and online proctoring; no country restriction stated
Eligibility
No formal prerequisites; candidates should be familiar with Microsoft security, compliance, and identity solutions, Microsoft 365, Azure cloud services, AI agents and Copilots, and Windows, Linux, and mobile operating systems
Retake policy
Retake allowed 24 hours after a failed first attempt; longer waiting periods for subsequent retakes