Learn mode
Learn as you go
Choose an answer, reveal the key, and review available explanations, citations and candidate context.
25 questions free
Start guided practiceSecurity operations with Microsoft Defender XDR and Sentinel: configuring protections and detections, running incident response, and hunting threats with KQL.
Microsoft Security Operations Analyst is Microsoft's associate-level cybersecurity certification, sat as exam SC-200. The exam runs for 1 hour 40 minutes, with a pass mark of 700 / 1000 (scaled). It costs US$165 at the standard rate.
Microsoft publishes the syllabus as 4 weighted domains. Manage incident response carries the most weight at 32%, and the three largest domains together account for roughly 83% of the scored content — worth knowing before you decide where study time goes.
Confirm these details on the official Microsoft page before booking — vendors adjust format and pricing without notice.
Standard rate, before local taxes
The published exam guide for SC-200, in the vendor's own order.
01Manage a security operations environment
22%02Configure protections and detections
17%03Manage incident response
32%04Manage security threats
29%Familiarity with Microsoft 365 and Azure security tooling; SC-900 is a helpful primer.
Associate level — Role-based credentials for practitioners with hands-on experience.
Preview 25 supported questions before unlocking the 390-question SC-200 bank.
Community-contributedCompiled from publicly posted community exam discussions. Contributed by third parties rather than written here, so accuracy varies and most items carry no explanation. Progress and bookmarks stay in this browser.
Answer support: 307 explanations, 388 questions with candidate context and 274 questions with direct citations. Bank updated .
Choose an answer, reveal the key, and review available explanations, citations and candidate context.
25 questions free
Start guided practiceKeep answers hidden on the clock and review every miss only after you finish the public sample.
Free sample mock
Open timed mockWant the complete 390-question bank?
One Exam Pass unlocks this selected bank for 12 months with no renewal.
Compiled from exam discussions posted publicly by other people on ExamTopics. Copyright in each contribution rests with its original author; it is reproduced here for study. Not verified by us — most items carry no explanation. To request removal, see our content policy.
The exam is scheduled for 1 hour 40 minutes. Microsoft does not publish a fixed question count for this exam.
700 / 1000 (scaled). Confirm the current figure on the official exam page before booking, as vendors adjust cut scores when an exam form is refreshed.
The standard price is US$165. Local pricing, taxes and any retake policy vary by region, so check the official page for the figure that applies to you.
Familiarity with Microsoft 365 and Azure security tooling; SC-900 is a helpful primer.
The exam guide covers Manage a security operations environment, Configure protections and detections, Manage incident response and Manage security threats. The full weighted breakdown is listed above.
Yes — this exam has 390 practice questions available here, each with the correct answer marked. They are community-contributed, compiled from exam discussions posted publicly by other people rather than written here, and most do not carry an explanation.