SC-100 hands-on labs — Microsoft Cybersecurity Architect
SC-100 is the exam for Microsoft Cybersecurity Architect. 59 hands-on labs are mapped to it by the lab vendor or a StationX roadmap — about 40 hours of hands-on practice in total. Each runs in your browser, with nothing to install. All 59 are in StationX Infrastructure Labs ($149/year).
59 labsabout 40 hoursStationX Infrastructure Labs · $149 / year · 59 labs
Access
StationX Infrastructure Labs — 3 attempts per lab
🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab
Already have access? Sign in.
SC-100 at a glance
- Exam code
- SC-100
- Certification
- Microsoft Cybersecurity Architect
- Vendor
- Microsoft
- Labs
- 59 in StationX Infrastructure Labs
- How the labs are mapped
- 59 from the StationX roadmap
- Practice time
- About 40 hours, every lab states a duration
- Lab levels
- Guided 33 · Advanced 21 · Expert 4 · Prerequisite 1
- The vendor's exam page
- learn.microsoft.com (opens in a new tab)
The 59 SC-100 labs
- Advanced Threat Hunting with Microsoft 365 Defender
- Can You Configure Access Reviews in Microsoft Entra ID?
- Can You Configure Application Registrations in Microsoft Entra ID?
- Can You Configure Device Registrations and Manage External Users in Microsoft Entra ID?
- Can You Configure Multi-Scope Network Security?
- Can You Configure Multi-Scope Resource Permissions?
- Can You Configure Multifactor Authentication and Self-service in Microsoft Entra ID?
- Can You Configure Network Security to Allow Application Traffic?
- Can You Configure Roles and Tenant-Wide Settings in Microsoft Entra ID?
- Can You Create a Secure Web App?
- Can You Create and Configure Enterprise Applications in Microsoft Entra ID?
- Can You Harden Virtual Machines in Azure?
- Can You Implement a Secure Azure Virtual Machine Network?
- Can You Implement Access and Single Sign-On for Applications by Using Microsoft Entra ID?
- Can You Implement and Manage Hybrid Identities and Synchronization in Microsoft Entra ID?
- Can You Implement Conditional Access Policies in Microsoft Entra ID?
- Can You Implement Entitlement Management by Using Microsoft Entra ID?
- Can You Implement Security for an Azure Web App?
- Can You Manage Identity Protection in Microsoft Entra ID?
- Can You Manage Privileged Access in Microsoft Entra ID?
- Can You Manage Users, Groups, and Administrative Units in Microsoft Entra ID?
- Can You Manage, Monitor, and Secure Azure Platform Services?
- Can You Monitor Microsoft Entra ID?
- Can You Secure Azure Platform Services?
- Comprehensive Security Management with Microsoft Defender and Entra ID
- Configure a Network Security Group in a Virtual Network
- Configure a Virtual Network Service Endpoint
- Configure Access Reviews in Microsoft Entra ID
- Configure an Application Security Group
- Configure Application Insights
- Configure Application Registrations in Microsoft Entra ID
- Configure Authentication for an Azure Web App
- Configure Azure Disk Encryption
- Configure Global Virtual Network Peering
- Configure Multi-factor Authentication in Microsoft Entra ID
- Configure Roles and Tenant Wide Settings in Microsoft Entra ID
- Configure Route Tables in a Virtual Network
- Configure Security by Using the Azure Kubernetes Service
- Configure Self-Service Password Reset in Microsoft Entra ID
- Configure Virtual Network Connectivity by Using Peering
- Create and Configure Enterprise Applications in Microsoft Entra ID
- Create Azure Resource Locks on a Web App
- Implement and Manage Hybrid Identities and Synchronization in Microsoft Entra ID
- Implement Security for an Azure Web App
- Incident Response with Microsoft Defender XDR
- Introduction to Microsoft Defender Overview
- Log Virtual Machine Network Traffic by Using Network Watcher
- Manage Privileged Access in Microsoft Entra ID
- Manage Users, Groups, and Administrative Units in Microsoft Entra ID
- Microsoft Defender for Cloud Apps
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity Setup
- Microsoft Defender for Office 365
- Monitor Communication Between Virtual Machines by Using Network Watcher
- Secure a Storage Account
- Secure Azure SQL Server
- Set an Azure Alert for a Web App
- Store Sensitive Data in Azure Key Vault
- Working with Microsoft Defender Products [Prerequisite Lab]
Roadmaps for SC-100
- Microsoft Cybersecurity Architect (SC-100) — certification roadmap: courses, labs and practice tests in order
- Security Architect — career roadmap; follows the Microsoft Cybersecurity Architect (SC-100) roadmap

