Microsoft SC-100 Certification Preparation: Cybersecurity Architect
This expert-level course shows you how to design a coherent cybersecurity strategy across the Microsoft ecosystem. It builds on Zero Trust, Microsoft's reference architectures and case studies close to the SC-100 exam style. It is aimed at experienced engineers who want to move from implementing controls to designing them.
The essentials
Publisher : Microsoft
Certification : Microsoft Certified: Cybersecurity Architect Expert
Exam code : SC-100
Duration : 4 days (28 h)
Level : Advanced
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Typically 40–60 questions · case studies · passing score 700
Exam voucher: included or optional depending on the package — contact us.
Align designs with MCRA, the Microsoft Cloud Security Benchmark, CAF and the Well-Architected Framework
Design SecOps, identity, privileged access and regulatory compliance capabilities
Define posture management for hybrid and multicloud environments
Specify security for endpoints, servers and SaaS, PaaS and IaaS services
Secure Microsoft 365, applications and organisational data
Program
Security best practices and priorities (20–25%)
Resilience against ransomware and other attacks
MCRA and Microsoft Cloud Security Benchmark
Cloud Adoption Framework and Well-Architected Framework
Security operations, identity and compliance (25–30%)
Security operations design
Identity and access management
Securing privileged access
Regulatory compliance
Infrastructure security (25–30%)
Hybrid and multicloud security posture
Client and server endpoints
SaaS, PaaS and IaaS services
Network security and Security Service Edge
Application and data security (20–25%)
Securing Microsoft 365
Securing applications
Protecting organisational data
Prerequisites
Solid experience with identity, platform protection, SecOps and data security
Hands-on work with hybrid and cloud environments
To earn the title: hold SC-200, SC-300 or SC-500 at Associate level
Target audience
Experienced cloud security engineers
Security architects and solution architects
Technical security leads such as deputy CISOs and SOC leads
Consultants designing Zero Trust programmes
The exam
The SC-100 exam usually has 40 to 60 questions, including design case studies, and you need 700 to pass. You take it through Pearson VUE at a test centre or online with a proctor, in English, French or several other languages. To receive the Cybersecurity Architect Expert certification you must also hold one of these Associate certifications: Identity and Access Administrator (SC-300), Security Operations Analyst (SC-200) or Cloud and AI Security Engineer (SC-500). The certification is valid for one year and renews for free online. Microsoft has scheduled an update to the English version on 21 October 2026.
Preparation tips
Read each case study in full before answering: the business constraints decide the right option
Review MCRA and the Microsoft Cloud Security Benchmark, which come up often
Think in terms of priorities and trade-offs, not portal clicks
Frequently asked questions (FAQ)
Can I take SC-100 without an Associate certification?
You can sit the exam, but the Expert title is only awarded once you also hold one of the required Associate certifications: SC-200, SC-300 or SC-500.
Does AZ-500 still count as a prerequisite?
Microsoft's page now lists SC-500, the successor to AZ-500, which retired on 31 August 2026. If you held AZ-500, check your certification profile before booking the exam.
Is SC-100 very hands-on?
It is mostly about designing and evaluating solutions. Solid hands-on experience still matters, because it helps you pick the right option in the case studies.
How long should I prepare?
For an engineer who already holds an Associate certification, the four-day course followed by two to four weeks of revision is a common pace.
Does the certification need renewing?
Yes, every year, through a free online assessment on Microsoft Learn that you can take during the six months before expiry.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a Microsoft training partner. Microsoft, Azure, Microsoft 365, Microsoft Entra, Microsoft Defender and Microsoft Sentinel are trademarks of Microsoft.