Exam SC-100: Microsoft Cybersecurity Architect — Information & Free Practice

The authority publishes percentage ranges for each content area. The practice percentages below use the midpoint of each range, normalized to 100%; they are not exact percentages published by the authority. Practice question counts may differ slightly because of rounding.

• Design solutions that align with security best practices and priorities — Official range: 20–25% (Practice allocation: 22.5%)

  • Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices
  • Design solutions that align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmark (MCSB)
  • Design solutions that align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework
• Design security operations, identity, and compliance capabilities — Official range: 25–30% (Practice allocation: 27.5%)

  • Design solutions for security operations
  • Design solutions for identity and access management
  • Design solutions for securing privileged access
  • Design solutions for regulatory compliance
• Design security solutions for infrastructure — Official range: 25–30% (Practice allocation: 27.5%)

  • Design solutions for security posture management in hybrid and multicloud environments
  • Specify requirements for securing server and client endpoints
  • Specify requirements for securing SaaS, PaaS, and IaaS services
  • Evaluate solutions for network security and Security Service Edge (SSE)
• Design security solutions for applications and data — Official range: 20–25% (Practice allocation: 22.5%)

  • Evaluate solutions for securing Microsoft 365
  • Design solutions for securing applications
  • Design solutions for securing an organization's data