StationX
Start free

← All paths

Microsoft Cybersecurity Architect (SC-100)

Exam SC-100 Microsoft Advanced

Microsoft's expert-level security certification. Design a Zero Trust strategy and security architecture across an estate. Requires a prior Microsoft security associate certification: Security Operations Analyst, Identity and Access Administrator, or Cloud and AI Security Engineer.

2 courses · 20 sections · 188 lectures · 59 labs · ≈ 40 h of hands-on labs

All 59 SC-100 hands-on labs on one page →

Free to start: the free lessons and guides for this roadmap →

Exam domains

  • Design solutions that align with security best practices and priorities — 20–25%
  • Design security operations, identity, and compliance capabilities — 25–30%
  • Design security solutions for infrastructure — 25–30%
  • Design security solutions for applications and data — 20–25%

Microsoft publishes a range for each domain. The outline was updated on 21 October 2026, adding secure AI adoption and Microsoft Entra Agent ID. The SC-100 course follows the 2022 outline: its chapters predate the MCRA and MCSB, ransomware-resiliency and AI-security objectives, so use Microsoft's free study guide for those.

Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.

The path

Start here →

Step 1 — Learn architecture and Zero Trust

Design strategy, not just configuration.

2 courses · 20 sections · 188 lectures

Learn

Free resources

Step 2 — Design security operations and identity

Detection and response with Defender XDR, and identity and privileged access in Entra ID: the joint-largest domain, 25–30%.

32 labs

Learn

  • CourseCovered in Microsoft Cybersecurity Architect - SC-100 Exam Preparation (opens in a new tab)opens on courses.stationx.net — Module 1 chapters on security strategy and identity security 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    17 sections · 176 lectures
    1. Training Overview 1
    2. SC - 100 Microsoft Cybersecurity Architect - Introduction 2
    3. Design a Zero Trust strategy and architecture 1
    4. Module 1 - Chapter 1 - The Role of a Security Architect 27
    5. Module 1 - Chapter 2 - Design a Security Options Strategy 30
    6. Module 1 - Chapter 3 - Identity Security Strategy 29
    7. Module 2 - Evaluate Governance Risk Complience (GRC) Strategies 1
    8. Evaluate Governance Risk Compliance (GRC)strategies 7
    9. Module 2 - Chapter 2 - Evaluate Security Posture 7
    10. Module 3 - Design Security for Infrastructure 1
    11. Module 3 - Chapter 1 12
    12. Module 3 - Chapter 2 21
    13. Module 3 - Chapter 3 15
    14. Module 4 - Design a Strategy for Data and Applications 1
    15. Module 4 - Chapter 1 - Security Requirments for Applications 10
    16. Module 4 - Chapter 2 - Designing a Strategy for Securing the Data 10
    17. Audio Version of the Training 1

No Microsoft Sentinel or Purview labs exist yet; these labs practise Defender XDR and Entra ID, and the course teaches the rest.

Practise

Step 3 — Secure the platform

Apply the architecture in Azure.

27 labs

Learn

  • CourseCovered in Microsoft Cybersecurity Architect - SC-100 Exam Preparation (opens in a new tab)opens on courses.stationx.net — platform-security architecture sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
    17 sections · 176 lectures
    1. Training Overview 1
    2. SC - 100 Microsoft Cybersecurity Architect - Introduction 2
    3. Design a Zero Trust strategy and architecture 1
    4. Module 1 - Chapter 1 - The Role of a Security Architect 27
    5. Module 1 - Chapter 2 - Design a Security Options Strategy 30
    6. Module 1 - Chapter 3 - Identity Security Strategy 29
    7. Module 2 - Evaluate Governance Risk Complience (GRC) Strategies 1
    8. Evaluate Governance Risk Compliance (GRC)strategies 7
    9. Module 2 - Chapter 2 - Evaluate Security Posture 7
    10. Module 3 - Design Security for Infrastructure 1
    11. Module 3 - Chapter 1 12
    12. Module 3 - Chapter 2 21
    13. Module 3 - Chapter 3 15
    14. Module 4 - Design a Strategy for Data and Applications 1
    15. Module 4 - Chapter 1 - Security Requirments for Applications 10
    16. Module 4 - Chapter 2 - Designing a Strategy for Securing the Data 10
    17. Audio Version of the Training 1

Practise

Where this leads

Choose your next roadmap

Next level

AI-Driven Security Engineering

After this roadmap: direct AI to build real security solutions. “No coding background required. You direct the AI; the AI does the building.”

See the AI-Driven Security Engineering Master’s →