OpenExamsFREE PRACTICE — ANY EXAM

Exam SC-200: Microsoft Security Operations Analyst — Information & Free Practice

US · Examination information

100 free questions · Answer explanations · No signup required

Start free practice →

Exam SC-200: Microsoft Security Operations Analyst

Provider
Pearson VUE
Format
Proctored examination; interactive components may be included.
Time limit
100 minutes
Passing score
700 or greater on the Microsoft technical-exam scale of 1 to 1,000; a scaled score is not a percentage.
Examination outline

The authority publishes percentage ranges for each content area. The practice percentages below use the midpoint of each range, normalized to 100%; they are not exact percentages published by the authority. Practice question counts may differ slightly because of rounding.

  • Manage a security operations environment — Official range: 40–45% (Practice allocation: 41.46%)
    • Configure automation for Microsoft Defender XDR and Microsoft Sentinel
    • Configure the Microsoft Sentinel SIEM and platform
    • Ingest data into the Microsoft Sentinel SIEM and platform
    • Configure detections
  • Respond to security incidents — Official range: 35–40% (Practice allocation: 36.59%)
    • Respond to alerts and incidents in Microsoft Defender XDR
    • Respond to alerts and incidents in Microsoft Defender for Endpoint
    • Investigate Microsoft 365 activities to identify threats
  • Perform threat hunting — Official range: 20–25% (Practice allocation: 21.95%)
    • Detect threats by using Microsoft Defender XDR
    • Detect threats by using the Microsoft Sentinel platform
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.