
Exam format
Microsoft Certified: Cybersecurity Architect Expert Exam Format
Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The SC-100 exam is the capstone for the Microsoft Cybersecurity Architect Expert certification. It focuses on high-level architectural design rather than granular configuration. Candidates must demonstrate the ability to integrate various Microsoft security technologies—such as Microsoft Defender, Microsoft Sentinel, and Microsoft Entra—into a cohesive, resilient security posture. The exam tests your capability to apply Zero Trust principles to diverse environments, ensuring that security is baked into the foundation of the enterprise architecture. You will be evaluated on your capacity to balance business enablers with robust security controls, managing risk in a complex, evolving threat landscape.
- 40 questions
- 120 min
- 70% to pass
- 4 domains
Exam facts at a glance
The published specifications for this certification.
| Specification | Value |
|---|---|
| Questions | 40 |
| Time limit | 120 minutes (180s per question) |
| Passing score | 70% — 700 or greater (on a scale of 1 to 1,000) |
| Domains | 4 |
| Level | Expert |
| Question bank here | 40 questions |
| Published format | Not published by the provider; duration confirmed at registration (Microsoft's table lists 100 or 120 minutes depending on labs) |
| Source | Official exam specification, published by the vendor |
Official domain weights
The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.
| Domain | Weight | Topics | Practice Qs |
|---|---|---|---|
| Design security solutions for infrastructure | 28% |
| 11 |
| Design security solutions for applications and data | 22% |
| 9 |
| Design security operations, identity, and compliance capabilities | 28% |
| 11 |
| Design solutions that align with security best practices and priorities | 22% |
| 9 |
The heaviest domain is Design security solutions for infrastructure at 28%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.
Note from the vendor record: Prerequisites for the Cybersecurity Architect Expert credential: first earn one of Identity and Access Administrator (SC-300), Security Operations Analyst (SC-200), or Cloud and AI Security Engineer (SC-500). English version updated 2026-10-21; no retirement date; renewal every 12 months; question count not published. Official exam page
More about the Microsoft Certified: Cybersecurity Architect Expert exam
Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.
Related certifications
Explore other certifications in the same category and see how they stack up.
Frequently asked questions
Everything you need to know about the Microsoft Certified: Cybersecurity Architect Expert exam.



%2520R82.png&w=3840&q=75)