Microsoft

Microsoft Cybersecurity Architect (SC-100)
exam objectives

Validates expert-level skill designing and evaluating enterprise cybersecurity strategy across Zero Trust, GRC, security operations, and security posture management -- translating business resiliency requirements into security architectures for identity, infrastructure, applications, data, and AI workloads using Microsoft security technologies. Microsoft gates this exam behind a prerequisite associate certification (AZ-500, SC-200, or SC-300).

Questions
60
Duration
100 min
Passing score
700
Domains
4

450 practice questions available for SC-100 on CertPilot AI, mapped to the domains below.

SC-100 exam domains and weightings

The SC-100 exam is split into 4 domains. The percentage next to each is the share of the exam it accounts for — study time is best spent proportionally.

1.0Design solutions that align with security best practices and priorities

23%

101 practice questions in this domain

  • 1.1Design a resiliency strategy for ransomware and other attacks based on Microsoft Security Best Practices
  • 1.2Design solutions that align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmark (MCSB)
  • 1.3Design solutions that align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework

2.0Design security operations, identity, and compliance capabilities

27%

124 practice questions in this domain

  • 2.1Design solutions for security operations
  • 2.2Design solutions for identity and access management
  • 2.3Design solutions for securing privileged access
  • 2.4Design solutions for regulatory compliance

3.0Design security solutions for infrastructure

27%

123 practice questions in this domain

  • 3.1Design solutions for security posture management in hybrid and multicloud environments
  • 3.2Specify requirements for securing server and client endpoints
  • 3.3Specify requirements for securing SaaS, PaaS, and IaaS services
  • 3.4Evaluate solutions for network security and Security Service Edge (SSE)

4.0Design security solutions for applications and data

23%

102 practice questions in this domain

  • 4.1Evaluate solutions for securing Microsoft 365
  • 4.2Design solutions for securing applications
  • 4.3Design solutions for securing an organization's data

How to prepare for Microsoft Cybersecurity Architect

Most candidates fail SC-100 not because they didn't know the material, but because they couldn't tell which material they were weakest on. Reading the objectives end to end treats every domain as equally important — the exam doesn't. On SC-100, Design security operations, identity, and compliance capabilities alone is 27% of your score.

CertPilot AI works the other way around. It tracks your accuracy per domain, weights each domain by its real exam share, and pulls most of each practice session from wherever you're currently weakest. The result is a single readiness score — at 90% you're in the range where candidates typically pass, so you book the exam on evidence instead of a hunch.

Every question comes with an AI explanation of why the right answer is right and why each distractor is wrong. The Exam Decoder goes further and breaks down how to read a question — the qualifiers, the scenario framing, and the trap options — which is the skill that separates a 740 from a 700.

Microsoft Cybersecurity Architect (SC-100) FAQ

How many questions are on the Microsoft Cybersecurity Architect (SC-100) exam?

The SC-100 exam has up to 60 questions and you get 100 minutes to complete it.

What score do you need to pass Microsoft Cybersecurity Architect?

Microsoft Cybersecurity Architect requires a scaled score of 700. Scaled scoring means the raw number of correct answers is adjusted for the difficulty of the specific question set you were served, so there is no fixed percentage that guarantees a pass.

What domains does the SC-100 exam cover?

Microsoft Cybersecurity Architect is divided into 4 domains: Design solutions that align with security best practices and priorities (23%), Design security operations, identity, and compliance capabilities (27%), Design security solutions for infrastructure (27%), Design security solutions for applications and data (23%). The heaviest weighted domain is Design security operations, identity, and compliance capabilities at 27% of the exam.

How do I know when I'm ready to book the SC-100 exam?

CertPilot AI calculates a readiness score by weighting your accuracy in each domain by that domain's share of the real exam, then scaling it by how many questions you've actually answered — so a domain you've barely touched can't inflate the number. At 90% you're in the range where candidates typically pass.

How much does the SC-100 exam cost?

The Microsoft Cybersecurity Architect exam voucher typically costs around $165 USD. Pricing varies by region and vendors periodically adjust it, so confirm on the official vendor site before booking.

Free to start

Start practising SC-100 questions

Adaptive sessions weighted to the domains above, AI explanations on every question, and a readiness score that tells you when to book.

Start free

Other Microsoft certifications