Microsoft · SC-200 blog

SC-200 study guides and exam strategy.

Security Operations Analyst - Microsoft Sentinel and Defender XDR in production.

SC-200 preparation7 min read

SC-200 Study Plan: Sentinel and Defender XDR in 6 Weeks

A 6-week SC-200 study plan covering Microsoft Sentinel, Defender XDR and KQL hunting - with labs, practice questions and mock exams.

SC-200 objectives6 min read

What the SC-200 skill-measured groups cover - Defender XDR, Microsoft Sentinel and risk reduction - and how to study each one.

SC-200 skills8 min read

The KQL fundamentals SC-200 candidates need - query structure, hunting tables, aggregation and how advanced hunting differs from Sentinel hunting.

Certification choices6 min read

SC-200 vs AZ-500 compared: SOC analyst vs security engineer, exam contents, difficulty and which fits your Azure security career.

SC-200 questions8 min read

A plain-English SC-200 glossary - AMA, ASIM, KQL, MDI, MDO, NRT rules, UEBA, XDR and the Sentinel terms the exam leans on.