How many questions are on the Microsoft Certified: Security Operations Analyst Associate exam?

The Microsoft Certified: Security Operations Analyst Associate exam has 50 questions, and the vendor's published description is: Not published by the provider; exam duration is 100 minutes.

How long do you have to complete the Microsoft Certified: Security Operations Analyst Associate exam?

You get 100 minutes, which is about 120 seconds per question. The published format is: Not published by the provider; exam duration is 100 minutes.

What score do you need to pass the Microsoft Certified: Security Operations Analyst Associate exam?

The passing score is 70% (700 or greater (on a scale of 1 to 1,000)).

How should I use the domain weights when revising?

Weight by percentage, not by domain. 25% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the Microsoft Certified: Security Operations Analyst Associate exam?

Yes: 50 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

Microsoft Certified: Security Operations Analyst Associate Exam Format

Q: What are the domains on the Microsoft Certified: Security Operations Analyst Associate exam?

There are 3 domains: Perform threat hunting, Respond to security incidents, Manage a security operations environment. The official weights are Perform threat hunting 25%, Respond to security incidents 35%, Manage a security operations environment 40%.

SC-200

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The Microsoft Certified: Security Operations Analyst Associate certification validates the skills required to operate a modern security operations center. Candidates are tested on their ability to manage security operations environments, respond to security incidents, and perform proactive threat hunting. The official skills measured focus on Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender for Cloud, Microsoft Defender for Office 365, Microsoft Defender for Endpoint, and Microsoft Entra ID Protection. Passing the exam requires practical experience with security information and event management (SIEM) and extended detection and response (XDR) tools. Candidates must be comfortable using Kusto Query Language (KQL) to investigate security data and build detections. The certification is updated after the July 2026 content revision, making it aligned with current Microsoft security operations capabilities.

50 questions

100 min

70% to pass

3 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	50
Time limit	100 minutes (120s per question)
Passing score	70% — 700 or greater (on a scale of 1 to 1,000)
Domains	3
Level	Associate
Question bank here	50 questions
Published format	Not published by the provider; exam duration is 100 minutes
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Perform threat hunting	25%	Perform threat hunts using Microsoft Sentinel Query Microsoft Sentinel data for threat hunting Use Microsoft 365 Defender for threat hunting +1 more	12
Respond to security incidents	35%	Respond to alerts and incidents in Microsoft Defender for Endpoint Respond to alerts and incidents in Microsoft Defender for Cloud Respond to alerts and incidents in Microsoft Sentinel +1 more	18
Manage a security operations environment	40%	Configure automation for Microsoft Defender XDR and Microsoft Sentinel Configure the Microsoft Sentinel SIEM and platform Ingest data into the Microsoft Sentinel SIEM and platform +1 more	20

The heaviest domain is Perform threat hunting at 25%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Microsoft does not publish per-exam question counts (it states only that most exams have 40-60 questions). English certification update effective 2026-10-21. Renewal every 12 months via free online assessment; delivered through Pearson VUE. Official exam page