Microsoft Cybersecurity Architect Expert: the honest guide
Everything Microsoft Azure publishes about SC-100, in one place: what the exam asks, how the domains are weighted, and what it takes to be ready.
This guide page is built from the registry, not written yet.
Everything below comes from Cybersecurity Architect’s published exam data, and every figure links to the vendor page it came from. The researched version, with study plans and the parts nobody publishes, is still being written. This page is not submitted to search engines until it is.
Practise Cybersecurity Architect questions in the meantimeWhat the exam actually asks you to do
Multiple choice and multiple response, plus drag-and-drop ordering, hot area items where you click a region of a screenshot, and case studies that hold one scenario across several linked questions.
- Multiple choice
- Multiple response
- Drag and drop
- Hot area
- Case study
The highlighted formats are the ones you cannot answer from memory alone. Microsoft Learn, exam duration and question types ↗
Domain breakdown and official weightings
From the official Microsoft Learn study guides. Design security operations, identity, and compliance capabilities is the heaviest domain at 27 percent, followed by Design security solutions for infrastructure at 27 percent.
- Design solutions that align with security best practices and priorities23%
- Design security operations, identity, and compliance capabilities27%
- Design security solutions for infrastructure27%
- Design security solutions for applications and data23%
What comes after passing
Role-based certifications last one year and renew free through an online assessment on Microsoft Learn. The only cost is the hour it takes.
Costs across the full renewal cycle are on the Cybersecurity Architect cost page.
Frequently asked questions
How is SC-100 different from AZ-500 and SC-200?
Those exams configure and operate; SC-100 designs. Questions give a business scenario and ask which strategy fits: Zero Trust rollout order, which capabilities close a described gap, how governance and operations connect across Microsoft's security stack.
What must I hold for the Expert certification?
SC-100 plus one prerequisite certification: AZ-500, SC-200 or SC-300. The exam itself assumes working familiarity with what all three cover.
Note on domain weightings
Microsoft publishes weightings as ranges. The figures here use midpoints of the official ranges from the current SC-100 study guide.
Keep reading
Cybersecurity Architect practice questions
Free sample questions with the full explanation on every answer.
Cybersecurity Architect passing score
The exact cut score, what kind of number it is, and the retake terms.
How hard is Cybersecurity Architect?
An honest difficulty read from the format, the clock and the weights.
Practise Cybersecurity Architect for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free Cybersecurity Architect questions