Microsoft SC-100
The expert-level Microsoft security architecture certification — Zero Trust strategy, designing security for infrastructure, data, applications and identity.
Updated
- Zero Trust strategy and architecture design
- Security posture and technical strategy for GRC requirements
- Security for infrastructure, applications and data
- Best-practice architecture using the Microsoft Cybersecurity Reference Architecture (MCRA)
Current exam scope
The current SC-100 outline covers four areas: designing solutions that align with security best practices and priorities (20-25%), designing security operations, identity and compliance capabilities (25-30%), designing security solutions for infrastructure (25-30%), and designing security solutions for applications and data (20-25%). To hold the Cybersecurity Architect Expert title, SC-100 has to be paired with at least one associate-level exam — AZ-500, SC-200 or SC-300; mine is paired with AZ-500. It's scenario-based rather than product-trivia: the exam checks whether you can turn a business requirement into a prioritised, Zero-Trust-aligned architecture decision, not whether you remember a setting's location in the portal.
Related
Microsoft AZ-500
AZ-500 Azure Security Engineer: identity, platform protection, data and application security, and security operations in Azure.
Identity & Zero Trust
Entra ID hardening, Conditional Access authentication strengths, privileged access management and identity attack-path analysis with BloodHound.
Microsoft Entra ID
Entra ID hardening: Conditional Access design, PIM, phishing-resistant authentication, app registration governance and agent identity.
Cloud security
Multi-cloud security practice: landing zones, identity, posture management, MITRE ATT&CK-aligned detection engineering and CIS hardening baselines.
Cloud security assessment
Configuration and architecture assessment for Azure, GCP and Alibaba Cloud: identity, network, data, logging and CSPM findings with a fix roadmap.
Cloud architecture review
Design-stage review of cloud and hybrid architecture: trust boundaries, identity model, segmentation, key management and detection design.