This was my preparation for the exam Microsoft Certified: Cybersecurity Architect Expert (SC-100)!



Dear Microsoft 365 Security and Azure Security Friends,


When I first read about this certification I was immediately excited! But at the same time I had a lot of respect, because it is an expert certification. I quickly started collecting information. The first thing I learned was that it takes a so-called prerequisite exam to become a Microsoft Certified: Cybersecurity Architect Expert certification. The following prerequisite exams are available (only one of these exams must be passed):


Microsoft Certified: Security Operations Analyst Associate (SC-200)


Microsoft Certified: Identity and Access Administrator Associate (SC-300)


Microsoft Certified: Azure Security Engineer Associate (AZ-500)


Microsoft 365 Certified: Security Administrator Associate (MS-500)


I have taken all these prerequisite exams. The two exams AZ-500 and MS-500 helped me the most in preparing for the SC-100 (this is certainly not the case for everyone). In this SC-100 exam you will be quizzed on topics in Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft 365 Defender for Cloud Apps (and all other Defender products), Azure Policy, Azure landing zone, etc. This spectrum is huge, please take enough time to "explore" these "portals" deeply. You don't have to have the technical knowledge down to the last detail. No not at all, in this exam it is important to use all the features and products with the right strategy. This was among other things my way to success!


Now to my preparations for the exam:

1. First of all, I looked at the Exam Topics to get a first impression of the scope of topics.


Please take a close look at the skills assessed:


2. So that I can prepare for an exam I need an Azure test environment (this is indispensable for me). You can sign up for a free trial here.


Next, I set up a Microsoft 365 test environment. You can sign up for a free trial here.


I chose the "Microsoft 365 Business Premium" plan for my testing. I have also registered several free trials to test the various Defender products.


3. Now it goes to the Microsoft Learn content. These learn paths (as you can see below, all 4) I have worked through completely and "mapped"/reconfigured as much as possible in my test environment.


4. Register for the exam early. This creates some pressure and you stay motivated.

5. Please also watch the video of John Savill, it is very helpful!

6. The Exam Ref for the SC-200 exam was also very supportive.


7. Further I have summarized various links that have also helped me a lot. Sorted by Functional Group.


Design a Zero Trust strategy and architecture:


Evaluate Governance Risk Compliance (GRC) technical strategies and security operations strategies:


Design security for infrastructure:


Design a strategy for data and applications:


8. You can find a list of all the links here:


I know you've probably read and heard this many times: read the exam questions slowly and accurately. Well, that was the key to success for me. It's the details that make the difference between success and failure. Let me give you an example at this point. You want to make a business app available. The authentication should be done by each person with his own LinkedIn account. Which variant of Azure Active Directory do you use for this? At this point you should know the different types of Azure Active Directory.


One final tip: When you have learned something new, try to explain what you have learned to another person (whether or not they know your subject). If you can explain it in your own words, you understand the subject. That is exactly how I do it, except that I do not explain it to another person, but record a video for YouTube!


I hope this information helps you and that you successfully pass the exam. I wish you success!


Kind regards, Tom Wechsler


P.S. All scripts (#PowerShell, Azure CLI, #Terraform, #ARM) that I use can be found on github!

6 Replies
This is an awesome post Tom! Thank you for sharing :)
Wow! Thank you for this comprehensive study guide.

This post is incredibly comprehensive and helpful. Thank you for sharing!