SC-200 Microsoft Security Operations Analyst Course

• You will get the most out of it if you already have a basic understanding of Microsoft 365, of Microsoft security, compliance and identity products, and of Microsoft Azure services such as Azure SQL Database and storage.
• Some exposure to Windows and to general security concepts also helps.
• If you are newer to Microsoft security, the SC-900 Security, Compliance and Identity Fundamentals course is a good place to start before this one.

Candidates can achieve this certification by passing the following exam(s).

• SC-200 Microsoft Security Operations Analyst

The exam fee is included in your course fee. The SC-200 exam in Australia costs about $265, and that cost is covered, so you have nothing extra to pay to sit it.

You have three ways to sit the exam. You can take it at Logitrain, as we are an authorised Pearson VUE test centre. You can take it online from home or work through Pearson VUE remote proctoring. Or you can sit it at any other Pearson VUE test centre near you. The certification exam can be registered and attempted within three months of course or module completion at the Logitrain training centre on weekdays during normal business hours, excluding public holidays.

The exam usually has between 40 and 60 questions, is scored out of 1000, and you need 700 to pass.

• Mitigate threats using Microsoft Defender XDR
• Mitigate threats using Microsoft Defender for Cloud
• Mitigate threats using Microsoft Sentinel
• Write and use Kusto Query Language queries to detect, analyse and report on threats
• Manage incident response and threat hunting across the environment

This course is likely to add to the employment-related skills of the participants. The skills developed are likely to be used in the course of being an employee or working in a business.

• Security operations analysts and SOC analysts
• Security engineers working in Microsoft environments
• Incident responders and threat hunters
• IT administrators moving into a security role
• People changing careers into cyber security with some IT background
• Anyone preparing for the SC-200 Microsoft Security Operations Analyst exam

• Detect, investigate, respond, and remediate threats to the production environment by using Microsoft Defender
• Detect, investigate, respond, and remediate endpoint threats by using Microsoft Defender for Endpoint
• Detect, investigate, respond, and remediate identity threats
• Detect, investigate, respond, and remediate application threats
• Manage cross-domain investigations in Microsoft 365 Defender portal
• Design and configure a Microsoft Defender for Cloud implementation
• Plan and implement the use of data connectors for ingestion of data sources in Microsoft
• Defender for Cloud
• Manage Microsoft Defender for Cloud alert rules
• Configure automation and remediation
• Investigate Microsoft Defender for Cloud alerts and incidents
• Design and configure a Microsoft Sentinel workspace
• Plan and implement the use of data connectors for ingestion of data sources in Microsoft
• Manage Microsoft Sentinel analytics rules
• Configure Security Orchestration Automation and Response (SOAR) in Microsoft Sentinel
• Manage Microsoft Sentinel Incidents
• Use Microsoft Sentinel workbooks to analyse and interpret data
• Kusto Query Language

Microsoft SC-900 Security, Compliance and Identity Fundamentals Course
Microsoft SC-300 Identity and Access Administrator Course
Microsoft SC-100 Cybersecurity Architect Course
Microsoft AZ-500 Azure Security Engineer Course
Cyber Security Courses

Bring our trainers to you and let the Logitrain customised team shape the SC-200 course around your organisation, whether you are building a new security operations team or lifting the skills of analysts who already use Microsoft Sentinel and Defender every day.

In house training is delivered at your workplace on dates that suit your team, and the content can focus on the Microsoft security tools and the kinds of threats your people actually deal with. It saves travel time, keeps your team together, and is often the most cost effective option once you have a handful of people to certify. The official SC-200 exam fee is included.

To arrange in house SC-200 training anywhere in Australia, complete the form and our team will be in touch with dates and pricing.

How much does the SC-200 course cost in Australia?
The SC-200 course starts from $1,799 and the price includes the official certification exam, so there is no separate exam fee to pay.

Is the exam fee included?
Yes. The official SC-200 Microsoft Security Operations Analyst exam is included in the course price.

How long is the SC-200 course?
It runs over four days full time, or four weeks part time on weeknights or weekends. Please confirm the duration before publishing.

Where is the course held?
We run classroom training in Melbourne, Sydney and Brisbane, and live online training in real time across the rest of Australia, including Adelaide, Perth and Canberra. We also deliver it in house at your workplace.

What are the prerequisites?
You should have a basic understanding of Microsoft 365, of Microsoft security, compliance and identity products, and of Azure services. It suits people with some security or IT operations background.

What does SC-200 cover?
The course covers threat detection, investigation and response using Microsoft Sentinel, Microsoft Defender XDR and Microsoft Defender for Cloud, and the use of the Kusto Query Language for detection and threat hunting.

What is the exam format?
The SC-200 exam usually has between 40 and 60 questions, is scored out of 1000, and you need 700 to pass.

Can I do SC-200 online?
Yes. The course is available as live online training in real time, taught by an instructor, so you can join from anywhere in Australia.

What jobs does SC-200 lead to?
It suits security operations analyst, SOC analyst, threat hunter and incident responder roles, and security engineers working in Microsoft environments.

What should I study before and after SC-200?
Many people take the SC-900 Security, Compliance and Identity Fundamentals first, then move on to SC-100 or AZ-500 as they gain experience.