SC-100 Microsoft Cybersecurity Architect

SC-100 is an advanced, expert-level course. There are no mandatory prerequisites, but Microsoft strongly recommends that you have:

• Passed an associate-level security certification such as AZ-500, SC-200 or SC-300.
• Advanced experience across identity and access, platform protection, security operations, and securing data and applications.
• Experience with hybrid and cloud implementations.
• If you are new to security, Microsoft recommends starting with SC-900 Course Microsoft Security, Compliance and Identity Fundamentals.

Candidates achieve this certification by passing the following exam.

• SC-100: Microsoft Cybersecurity Architect

You can book and sit the exam within three months of finishing your course or module. Sit it at the Logitrain test centre, at any other Pearson VUE test centre, or online through Pearson VUE online proctoring from a private space.

Passing SC-100 is a single exam, and it earns you the full Microsoft Certified: Microsoft Cybersecurity Architect certification. You need a score of 700 or more out of 1000 to pass.

Logitrain course material for SC-100 Microsoft Cybersecurity Architect is provided in digital format.

• Design solutions that align with security best practices and priorities
• Design security operations, identity and compliance capabilities
• Design security solutions for infrastructure
• Design security solutions for applications and data

• Cybersecurity Architects
• Security Engineers moving into an architect role
• Cloud Security Engineers
• Security Consultants and Specialists
• IT professionals with experience across identity, platform protection and security operations who want the
• Cybersecurity Architect Expert credential

• Zero Trust overview
• Develop Integration points in an architecture
• Develop security requirements based on business goals
• Translate security requirements into technical capabilities
• Design security for a resiliency strategy
• Design a security strategy for hybrid and multi-tenant environments
• Design technical and governance strategies for traffic filtering and segmentation
• Understand security for protocols
• Understand security operations frameworks, processes, and procedures
• Design a logging and auditing security strategy
• Develop security operations for hybrid and multi-cloud environments
• Design a strategy for Security Information and Event Management (SIEM) and Security Orchestration,
• Evaluate security workflows
• Review security strategies for incident management
• Evaluate security operations strategy for sharing technical threat intelligence
• Monitor sources for insights on threats and mitigations
• Secure access to cloud resources
• Recommend an identity store for security
• Recommend secure authentication and security authorization strategies
• Secure conditional access
• Design a strategy for role assignment and delegation
• Define Identity governance for access reviews and entitlement management
• Design a security strategy for privileged role access to infrastructure
• Design a security strategy for privileged activities
• Understand security for protocols
• Interpret compliance requirements and their technical capabilities
• Evaluate infrastructure compliance by using Microsoft Defender for Cloud
• Interpret compliance scores and recommend actions to resolve issues or improve security
• Design and validate the implementation of Azure Policy
• Design for data residency Requirements
• Evaluate security postures by using benchmarks
• Evaluate security postures by using Microsoft Defender for Cloud
• Evaluate security postures by using Secure Scores
• Evaluate security hygiene of Cloud Workloads
• Design security for an Azure Landing Zone
• Interpret technical threat intelligence and recommend risk mitigations
• Recommend security capabilities or controls to mitigate identified risks
• Plan and implement a security strategy across teams
• Establish a strategy and process for the proactive and continuous evolution of a security strategy
• Understand network protocols and best practices for network segmentation and traffic filtering
• Specify security baselines for server and client endpoints
• Specify security requirements for servers
• Specify security requirements for mobile devices and clients
• Specify requirements for securing Active Directory Domain Services
• Design a strategy to manage secrets, keys, and certificates
• Design a strategy for secure remote access
• Understand security operations frameworks, processes, and procedures
• Understand deep forensics procedures by resource type
• Specify security baselines for PaaS services
• Specify security baselines for IaaS services
• Specify security baselines for SaaS services
• Specify security requirements for IoT workloads
• Specify security requirements for data workloads
• Specify security requirements for web workloads
• Specify security requirements for storage workloads
• Specify security requirements for containers
• Specify security requirements for container orchestration
• Understand application threat modeling
• Specify priorities for mitigating threats to applications
• Specify a security standard for onboarding a new application
• Specify a security strategy for applications and APIs
• Prioritize mitigating threats to data
• Design a strategy to identify and protect sensitive data
• Specify an encryption standard for data at rest and in motion
• Design a security strategy for AI workloads and AI services

• SC‑900 Microsoft Security, Compliance, and Identity Fundamentals Course
• SC-200 Microsoft Security Operations Analyst Course
• SC-300 Microsoft Identity and Access Administrator Course
• AZ‑305 Designing Microsoft Azure Infrastructure Solutions Course
• AZ-500 Microsoft Azure Security Engineer Course
• MS‑102 Microsoft 365 Administrator

What is the SC-100 certification?
SC-100 is the Microsoft exam for the Cybersecurity Architect role. Passing it earns the Microsoft Certified: Cybersecurity Architect Expert certification. It covers designing security strategies across Zero Trust, identity, infrastructure, applications, data, AI and governance, risk and compliance.

Is SC-100 an expert-level certification?
Yes. SC-100 is an advanced, expert-level certification. It is aimed at people who already have hands-on security experience and design an organisation’s security strategy, rather than people new to security.

What are the prerequisites for SC-100?
There are no mandatory prerequisites, but Microsoft strongly recommends you first pass an associate-level security certification such as AZ-500, SC-200 or SC-300, and have advanced experience across identity, platform protection, security operations and securing data and applications.

What does the SC-100 exam involve?
The exam measures four areas, weighted by Microsoft as security best practices and priorities 20 to 25 per cent, security operations, identity and compliance 25 to 30 per cent, security solutions for infrastructure 25 to 30 per cent, and security solutions for applications and data 20 to 25 per cent. The passing score is 700 out of 1000, and it is sat at a Pearson VUE test centre.

Is the exam fee included?
Yes. Your Logitrain SC-100 course includes the official Microsoft exam fee, and you can register and sit the exam within three months of completing your course.

How much does the SC-100 course cost?
Contact Logitrain for the current price. Our course includes the official exam fee and course material, and we will beat any competitor’s advertised price for the same course.

Where can I do the SC-100 course?
You can train in class in Melbourne, Sydney and Brisbane, in house at your own premises anywhere in Australia, or live online in real time with a trainer from anywhere in the country.

Where should I start if I am new to Microsoft security?
If you are new to security, Microsoft recommends starting with SC-900 Microsoft Security, Compliance and Identity Fundamentals, then an associate cert such as SC-200 or AZ-500, before attempting SC-100.