MICROSOFT

Microsoft Certified:Security Operations Analyst Associate

SC-200

The Microsoft Certified: Security Operations Analyst Associate certification validates your ability to investigate, search for, and mitigate threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender. It is aimed at security operations analysts who monitor, identify, investigate, and respond to threats in multi-cloud and on-premises environments.

Practice Free Questions

3Domains

9Objectives

64Practice pages

304Free questions

SC-200 free practice questions

Choose any objective and open any question page — no sign-in required.

Configure automation for Microsoft Defender XDR and Microsoft Sentinel

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Configure the Microsoft Sentinel SIEM and platform

17 questions · 4 pages

Questions 1–5 6–10 11–15 16–17

Ingest data into the Microsoft Sentinel SIEM and platform

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Configure detections

37 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–37

Respond to alerts and incidents in Microsoft Defender XDR

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Respond to alerts and incidents in Microsoft Defender for Endpoint

37 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–37

Investigate Microsoft 365 activities to identify threats

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Detect threats by using Microsoft Defender XDR

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

Detect threats by using the Microsoft Sentinel platform

43 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–43

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (9 objectives · 64 pages).

Microsoft Certified:Security Operations Analyst Associate

SC-200 free practice questions

Domain 1 · Manage a security operations environment41% of practice bank · 4 objectives · 124 questions41%

Domain 2 · Respond to security incidents36% of practice bank · 3 objectives · 108 questions36%

Domain 3 · Perform threat hunting24% of practice bank · 2 objectives · 72 questions24%