1. Home
  2. Microsoft
  3. SC-200 Exam Syllabus

Microsoft SC-200 Exam Syllabus

Start Free SC-200 Exam Practice After Reviewing the Topics

Before starting your SC-200 exam preparation, it is recommended to review the complete Microsoft Security Operations Analyst exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free SC-200 questions. We also provide premium SC-200 practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.

Microsoft SC-200 Exam Objectives

Section Weight Objectives
Manage a security operations environment 20-25%
  • Configure settings in Microsoft Defender XDR
  • Manage assets and environments
  • Design and configure a Microsoft Sentinel workspace
  • Ingest data sources in Microsoft Sentinel
Configure protections and detections 15-20%
  • Configure protections in Microsoft Defender security technologies
  • Configure detections in Microsoft Defender XDR
  • Configure detections in Microsoft Sentinel
Manage incident response 25-30%
  • Respond to alerts and incidents in the Microsoft Defender portal
  • Respond to alerts and incidents identified by Microsoft Defender for Endpoint
  • Investigate Microsoft 365 activities
  • Respond to incidents in Microsoft Sentinel
  • Implement and use Copilot for Security
Manage security threats 15-20%
  • Hunt for threats by using Microsoft Defender XDR
  • Hunt for threats by using Microsoft Sentinel
  • Create and configure Microsoft Sentinel workbooks
Official Information https://docs.microsoft.com/en-us/learn/certifications/exams/sc-200