- Worth 20 to 25% of SC-100, with 13 skills in the study guide. We teach and practice each one
- Design a security strategy to support business resiliency goals, including identifying and prioritizing threats to business-critical assets
- Design solutions for business continuity and disaster recovery (BCDR), including secure backup and restore for hybrid and multicloud environments
- Design solutions for mitigating ransomware attacks, including prioritization of BCDR and privileged access
- Evaluate solutions for security updates
- Design solutions that align with best practices for cybersecurity capabilities and controls
- Design solutions that align with best practices for protecting against insider, external, and supply chain attacks
- Design AI solutions that align to the Microsoft Cloud Security Benchmark
- Design solutions that align with the Zero Trust adoption framework
- Design a strategy for secure AI adoption
- Design a new or evaluate an existing strategy for security and governance based on the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework (WAF)
- Recommend solutions for security and governance based on the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework
- Design solutions for implementing and governing security by using Azure landing zones
- Design a DevSecOps process that aligns with best practices in the Microsoft Cloud Adoption Framework for Azure (CAF)
Microsoft Certification Training Course
Cybersecurity Architect Expert (SC-100) Certification Training Course
We'll get you ready for Exam SC-100, Microsoft's expert level credential for cybersecurity architects.
Course focus: Security best practices, security operations, identity and compliance, infrastructure, and apps and data design, mapped to the SC-100 study guide.
Course Overview
What the SC-100 course covers and who it's for.
Per Microsoft, a cybersecurity architect turns a security strategy into capabilities that protect an organization's assets, business and operations. To earn the certification you pass SC-100 and hold one of the listed prerequisite associate certifications.
We work through design scenarios for each domain, including Zero Trust, the Microsoft Cybersecurity Reference Architectures and the Cloud Security Benchmark. Microsoft updated the exam on October 21, 2026, and our course follows the current study guide.
Microsoft says you should have experience in identity and access, platform protection, security operations, data and AI security, application security, and hybrid and multicloud infrastructure, with expert skills in at least one of them.
SC-100 is Microsoft's security architect exam. It moves you from running one product to designing Zero Trust across identity, devices, data, AI, apps, network and DevOps.
Accumentum is an independent training provider. We aren't a Microsoft partner and this isn't official Microsoft training. Microsoft sets exam content, prices and policies, so check learn.microsoft.com before you book.
Course Objectives
Get ready for SC-100 the way the exam is built.
01
Cover the Whole Study Guide
Work through all 4 skill areas in Microsoft's SC-100 study guide, weighted the way the exam weights them.
02
Go Deep on the Biggest Domain
Design security operations, identity, and compliance capabilities is 25 to 30% of the exam per Microsoft, so it gets the most class time.
03
Practice Hands-On
Work through the tasks the SC-100 study guide lists, hands on.
04
Master Design solutions that align with security best practices and priorities
Microsoft lists 13 skills here, worth 20 to 25%. We practice all of them, from the first, design a security strategy to support business resiliency goals, including identifying and prioritizing threats to business-critical assets, through the last, design a DevSecOps process that aligns with best practices in the Microsoft Cloud Adoption Framework for Azure (CAF).
05
Master Design security operations, identity, and compliance capabilities
Microsoft lists 25 skills here, worth 25 to 30%. We practice all of them, from the first, design a solution for detection and response that includes extended detection and response (XDR) and security information and event management (SIEM), through the last, evaluate and validate alignment with regulatory standards and benchmarks by using Microsoft Defender for Cloud.
06
Master Design security solutions for infrastructure
Microsoft lists 23 skills here, worth 25 to 30%. We practice all of them, from the first, evaluate security posture by using Microsoft Defender for Cloud, including the Microsoft Cloud Security Benchmark (MCSB), through the last, evaluate solutions that use Microsoft Entra Private Access.
07
Master Design security solutions for applications and data
Microsoft lists 20 skills here, worth 20 to 25%. We practice all of them, from the first, evaluate security posture for productivity and collaboration workloads by using metrics, including Microsoft Secure Score, through the last, design a security solution that includes Microsoft Defender for Storage and Microsoft Defender for Databases.
08
Be Ready for Test Day
We practice the question styles Microsoft uses and walk through how scheduling, scoring and renewal work.
Who Should Attend
- Senior security engineers moving into architecture.
- Security architects working with Microsoft clouds.
- SC-200, SC-300, SC-401 or SC-500 holders.
- Consultants who design security programs.
Prerequisites
- Microsoft requires one of its listed associate certifications before it awards the expert credential. Check the certification page for the current list.
- Several years of security engineering experience is strongly recommended.
Pathway Map
The SC-100 course in 4 modules.
Each module is one skill area from the official study guide, with its exam weight.
Course Content
- Worth 25 to 30% of SC-100, with 25 skills in the study guide. We teach and practice each one
- Design a solution for detection and response that includes extended detection and response (XDR) and security information and event management (SIEM)
- Design a solution for centralized logging and auditing, including Microsoft Purview Audit
- Design monitoring to support hybrid and multicloud environments
- Design a solution for security orchestration, automation, and response (SOAR), including Microsoft Sentinel and Microsoft Defender XDR
- Design and evaluate security workflows, including incident response, threat hunting, and incident management
- Design and evaluate threat detection coverage by using MITRE ATT&CK matrices, including Enterprise, Mobile, and industrial control systems (ICS)
- Design a solution for agent identities using Microsoft Entra Agent ID and conditional access policies
- Design a solution for access to software as a service (SaaS), platform as a service (PaaS), infrastructure as a service (IaaS), hybrid/on-premises, and multicloud resources, including identity, networking, and application controls
- Design a solution for Microsoft Entra ID, including hybrid and multi-cloud environments
- Design a solution for external identities, including business-to-business (B2B) and decentralized identity
- Design a modern authentication and authorization strategy, including Conditional Access, continuous access evaluation, risk scoring, and protected actions
- Validate the alignment of Conditional Access policies with a Zero Trust strategy
- Specify requirements to harden Active Directory Domain Services (AD DS)
- Design a solution to manage secrets, keys, and certificates
- Design a solution for assigning and delegating privileged roles by using the enterprise access model
- Evaluate the security and governance of Microsoft Entra ID, including Microsoft Entra Privileged Identity Management (PIM), entitlement management, and access reviews
- Evaluate the security and governance of Active Directory Domain Services (AD DS), including resilience to common attacks
- Design a solution for securing the administration of cloud tenants, including SaaS and multicloud infrastructure and platforms
- Design a solution for cloud infrastructure entitlement management
- Evaluate an access review management solution
- Design a solution for secure workstations for privileged access, including remote access
- Translate compliance requirements into security controls
- Design a solution to address compliance requirements by using Microsoft Purview
- Design Azure Policy solutions to address security and compliance requirements
- Evaluate and validate alignment with regulatory standards and benchmarks by using Microsoft Defender for Cloud
- Worth 25 to 30% of SC-100, with 23 skills in the study guide. We teach and practice each one
- Evaluate security posture by using Microsoft Defender for Cloud, including the Microsoft Cloud Security Benchmark (MCSB)
- Evaluate security posture by using Microsoft Secure Score
- Design integrated security posture management solutions that include Microsoft Defender for Cloud in hybrid and multi-cloud environments
- Select cloud workload protection solutions in Microsoft Defender for Cloud
- Design a solution for integrating hybrid and multicloud environments by using Azure Arc
- Design a solution for Microsoft Defender External Attack Surface Management (Defender EASM)
- Specify requirements and priorities for a posture management process that uses Microsoft Security Exposure Management attack paths, attack surface reduction, security insights, and initiatives
- Specify security requirements for servers, including multiple platforms and operating systems
- Specify security requirements for mobile devices and clients, including endpoint protection, hardening, and configuration
- Specify security requirements for IoT devices and embedded systems
- Evaluate solutions for securing operational technology (OT) and industrial control systems (ICS) by using Microsoft Defender for IoT
- Specify security baselines for server and client endpoints
- Evaluate Windows Local Administrator Password Solution (Windows LAPS) solution
- Specify security baselines for SaaS, PaaS, and IaaS services
- Specify security requirements for IoT workloads
- Specify security requirements for web workloads
- Specify security requirements for containers
- Specify security requirements for container orchestration
- Evaluate solutions that include Azure AI services security
- Evaluate network designs to align with security requirements and best practices
- Evaluate solutions that use Microsoft Entra Internet Access as a secure web gateway
- Evaluate solutions that use Microsoft Entra Internet Access for Microsoft Services, including cross-tenant configurations
- Evaluate solutions that use Microsoft Entra Private Access
- Worth 20 to 25% of SC-100, with 20 skills in the study guide. We teach and practice each one
- Evaluate security posture for productivity and collaboration workloads by using metrics, including Microsoft Secure Score
- Evaluate solutions that include Microsoft Defender for Office 365 and Microsoft Defender for Cloud Apps
- Evaluate device management solutions that include Microsoft Intune
- Evaluate solutions for securing data in Microsoft 365 by using Microsoft Purview
- Evaluate data security and compliance controls in Microsoft 365 Copilot
- Evaluate the security posture of existing application portfolios
- Evaluate threats to business-critical applications by using threat modeling
- Design and implement a full lifecycle strategy for application security
- Design and implement standards and practices for securing the application development process
- Map technologies to application security requirements
- Design a solution for workload identities to authenticate and access Azure resources
- Design a solution for API management and security
- Design solutions that secure applications by using Azure Web Application Firewall (WAF)
- Evaluate solutions for data discovery and classification
- Specify priorities for mitigating threats to data
- Evaluate solutions for encryption of data at rest and in transit, including Azure Key Vault and infrastructure encryption
- Design security for data used in AI workloads
- Design a security solution for data in Azure workloads, including Azure SQL, Azure Synapse Analytics, and Azure Cosmos DB
- Design a security solution for data in Azure Storage
- Design a security solution that includes Microsoft Defender for Storage and Microsoft Defender for Databases
Course Features
How we teach SC-100.
Instructor-Led Classes
Live instruction with time for questions, so you aren't figuring out the hard parts alone.
Hands-On Practice
Practice on the tasks in the SC-100 study guide.
Study Guide Mapping
Every module maps to a skill area in Microsoft's SC-100 study guide.
Exam Strategy
Practice questions plus tips on scheduling, timing and what to expect on test day.
Certification Exam
About the SC-100 exam.
SC-100 Exam Readiness
Our students pass at a 98.8% rate across Accumentum courses. We'll get you ready for SC-100 the same way.
Per Microsoft, SC-100 is the exam for Microsoft Certified: Cybersecurity Architect Expert. Microsoft lists 120 minutes of exam time for expert exams like this one. You need a score of 700 or greater to pass. Microsoft sets the price by country and shows it on the exam page.
Full details are on the official certification page and the SC-100 study guide.
Accumentum is an independent training provider. We aren't a Microsoft partner and this isn't official Microsoft training. Microsoft sets exam content, prices and policies, so check learn.microsoft.com before you book.
Inside the Course
A closer look at each SC-100 domain.
The course starts with security best practices and priorities. The Microsoft Cloud Security Benchmark, the Well-Architected Framework, and how to build a security strategy around Zero Trust and ransomware resilience.
The second domain covers security operations, identity and compliance. Designing SOC capability with Microsoft Sentinel and Defender XDR, identity and access strategy with Entra, privileged access, and regulatory compliance with Purview and Defender for Cloud.
The infrastructure domain covers security posture management across hybrid and multicloud setups, endpoint protection, network security and SaaS. The applications and data domain covers secure development, API security, data protection and securing AI workloads.
Every module ends with design scenarios like the ones on the exam. You'll weigh tradeoffs, defend a choice and explain it in business terms, which is the real job of an architect.
Study Plan
A study plan for SC-100 built from the study guide.
Time follows Microsoft's domain weights, so you study what the exam asks most.
Step 1: Design solutions that align with security best practices and priorities
Spend about 25% of your study time here. First, design a security strategy to support business resiliency goals, including identifying and prioritizing threats to business-critical assets. Then design AI solutions that align to the Microsoft Cloud Security Benchmark. Last, design a DevSecOps process that aligns with best practices in the Microsoft Cloud Adoption Framework for Azure (CAF).
Step 2: Design security operations, identity, and compliance capabilities
Spend about 30% of your study time here. First, design a solution for detection and response that includes extended detection and response (XDR) and security information and event management (SIEM). Then specify requirements to harden Active Directory Domain Services (AD DS). Last, evaluate and validate alignment with regulatory standards and benchmarks by using Microsoft Defender for Cloud.
Step 3: Design security solutions for infrastructure
Spend about 30% of your study time here. First, evaluate security posture by using Microsoft Defender for Cloud, including the Microsoft Cloud Security Benchmark (MCSB). Then specify security baselines for server and client endpoints. Last, evaluate solutions that use Microsoft Entra Private Access.
Step 4: Design security solutions for applications and data
Spend about 25% of your study time here. First, evaluate security posture for productivity and collaboration workloads by using metrics, including Microsoft Secure Score. Then design a solution for workload identities to authenticate and access Azure resources. Last, design a security solution that includes Microsoft Defender for Storage and Microsoft Defender for Databases.
Step 5: Review and book
Take Microsoft's free practice assessment, review the domains you scored lowest in, and book the exam once you're scoring well.
Official Resources
Where to check SC-100 facts on Microsoft Learn.
Microsoft changes exams often. These are the pages we teach from.
Exam Domains
How Microsoft weights the SC-100 exam.
From the official SC-100 study guide. Bigger domains get more questions.
Design solutions that align with security best practices and priorities
20 to 25% of the exam. 13 skills listed by Microsoft.
Design security operations, identity, and compliance capabilities
25 to 30% of the exam. 25 skills listed by Microsoft.
Design security solutions for infrastructure
25 to 30% of the exam. 23 skills listed by Microsoft.
Design security solutions for applications and data
20 to 25% of the exam. 20 skills listed by Microsoft.
Exam and Course Format
What test day and class look like for SC-100.
SC-100 is a expert level exam. Microsoft lists 120 minutes of exam time for expert exams like this one. Microsoft scores exams from 1 to 1000 and you need 700 or greater to pass.
You can book SC-100 through the exam page on Microsoft Learn, where Microsoft shows the price for your country and the delivery options it offers. Microsoft also has a free exam sandbox there so you can see the question layout before test day.
Our course runs instructor-led. We teach each domain in study guide order, practice the tasks, and finish with review on the areas you miss most.
Career Paths
Where SC-100 fits in your career.
Cybersecurity architect
Design security across the whole Microsoft estate.
Security engineer moving up
Turn deep skill in one area into design work across all of them.
Security operations lead
Plan SOC capability and security posture.
Solution architect
Bring Zero Trust into designs from the start.
Funding and PathPay
Ways to pay for SC-100 training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're a soldier or airman, ask us whether Army Credentialing Assistance or Air Force COOL can fund this course for you.
PathPay lets you spread tuition into monthly payments instead of paying it all up front. You can see the plans on the PathPay page or ask us which plan fits this course.
Employers often pay for Microsoft training too. Ask us for a quote or invoice your company can use.
See PathPay plans, Army Credentialing Assistance training and Air Force COOL training.
Related Courses
Courses that pair well with SC-100.
Frequently Asked Questions
Common questions about our SC-100 course.
SC-100 is the exam for Microsoft Certified: Cybersecurity Architect Expert, a expert level credential. Details are on the official page at https://learn.microsoft.com/en-us/credentials/certifications/cybersecurity-architect-expert/
No. We're an independent training provider and we aren't a Microsoft partner. Our course follows Microsoft's public study guide. Microsoft offers free self-paced training on Microsoft Learn too.
Microsoft sets the price by country and shows it on the exam page when you pick your location. Check it there before you book.
Microsoft lists 120 minutes of exam time for expert exams like this one. A score of 700 or greater is needed to pass.
Fundamentals certifications don't expire. Associate, expert and specialty certifications are valid for one year and you renew for free online on Microsoft Learn.
Microsoft requires one of its listed associate certifications before it awards the expert credential. Check the certification page for the current list. Several years of security engineering experience is strongly recommended.
Instructor-led, with hands-on practice and exam prep. Ask us about upcoming class dates.
Microsoft requires one of these to award the expert certification: Identity and Access Administrator Associate (SC-300), Security Operations Analyst Associate (SC-200) or Cloud and AI Security Engineer Associate (SC-500).
Microsoft lists English, Japanese, Chinese (Simplified), Korean, German, French, Spanish, Portuguese (Brazil), Chinese (Traditional) and Italian.
Four domains. Designing security operations, identity and compliance capabilities and designing security for infrastructure are the biggest, at 25 to 30% each per the study guide. Check it for the newest skills list before you book.
It's a design exam. Expect scenario questions about choosing and planning solutions, not step by step admin tasks.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're a soldier or airman, ask us whether Army Credentialing Assistance or Air Force COOL can fund this course for you.
PathPay lets you spread tuition into monthly payments instead of paying it all up front. You can see the plans on the PathPay page or ask us which plan fits this course.
Use the registration page linked below, or email info@accumentum.net and we'll follow up with dates and next steps.
Enrollment
Enroll in SC-100 training with Accumentum.
Enroll in our SC-100 course to get ready for the Cybersecurity Architect Expert exam with instructor-led classes and hands-on practice.
For dates and next steps, use the registration page linked below or email info@accumentum.net.
Ready to start on SC-100?
Tell us your target date and we'll help you plan the path.