Microsoft Certified: Cybersecurity Architect Expert

Exam format

Microsoft logo

Microsoft Certified: Cybersecurity Architect Expert Exam Format

SC-100

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The SC-100 exam is the capstone for the Microsoft Cybersecurity Architect Expert certification. It focuses on high-level architectural design rather than granular configuration. Candidates must demonstrate the ability to integrate various Microsoft security technologies—such as Microsoft Defender, Microsoft Sentinel, and Microsoft Entra—into a cohesive, resilient security posture. The exam tests your capability to apply Zero Trust principles to diverse environments, ensuring that security is baked into the foundation of the enterprise architecture. You will be evaluated on your capacity to balance business enablers with robust security controls, managing risk in a complex, evolving threat landscape.

40 questions
120 min
70% to pass
4 domains

Exam facts at a glance

The published specifications for this certification.

SpecificationValue
Questions40
Time limit120 minutes (180s per question)
Passing score70% — 700 or greater (on a scale of 1 to 1,000)
Domains4
LevelExpert
Question bank here40 questions
Published formatNot published by the provider; duration confirmed at registration (Microsoft's table lists 100 or 120 minutes depending on labs)
SourceOfficial exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Design security solutions for infrastructure28%
  • Network security design
  • Endpoint security and management
  • Cloud infrastructure security (Azure/Multi-cloud)
  • +1 more
11
Design security solutions for applications and data22%
  • Data protection and encryption
  • Application security lifecycle
  • Database security design
  • +1 more
9
Design security operations, identity, and compliance capabilities28%
  • Identity and Access Management (IAM) design
  • Security Operations Center (SOC) integration
  • Incident response planning
  • +1 more
11
Design solutions that align with security best practices and priorities22%
  • Zero Trust architecture principles
  • Security governance and risk management
  • Compliance frameworks and regulatory requirements
  • +1 more
9

The heaviest domain is Design security solutions for infrastructure at 28%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Prerequisites for the Cybersecurity Architect Expert credential: first earn one of Identity and Access Administrator (SC-300), Security Operations Analyst (SC-200), or Cloud and AI Security Engineer (SC-500). English version updated 2026-10-21; no retirement date; renewal every 12 months; question count not published. Official exam page

More about the Microsoft Certified: Cybersecurity Architect Expert exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the Microsoft Certified: Cybersecurity Architect Expert exam.