Microsoft Certified: Security Operations Analyst Associate
The Microsoft Certified: Security Operations Analyst Associate (SC-200) validates your ability to monitor, investigate, and respond to threats using Microsoft Sentinel, Microsoft Defender XDR, and Defender for Cloud. Earn this certification to demonstrate expertise in security operations and threat hunting.
certilumExam syllabus, organized by domain
Try a real question
Sample Microsoft Certified: Security Operations Analyst Associate exam question
Answer this question the same way you would on exam day. No sign-up needed — one random question, three tries to swap it out.
The KQL query in the code block joins email records with attachment records. Which table should replace the placeholder to return file attachment information for a phishing email?
EmailEvents
| where NetworkMessageId == 'network-message-id'
| join kind=inner TABLE_NAME on NetworkMessageIdFrequently asked questions
Key facts about the Microsoft Certified: Security Operations Analyst Associate certification and how to prepare for it.
Skills & Requirements
What you need to know before attempting the Microsoft Certified: Security Operations Analyst Associate exam.
Compare related certifications
Explore other certifications in the same category and see how they stack up.
Related articles
Learn more about Cloud Computing with these guides.
