Microsoft Security Certification
Practice Tests
Free, exam-aligned practice tests for Microsoft SC-900, SC-200, and AZ-500. Every test mirrors the real exam pace, domain weights, and question style — no sign-up required.
⚠ AZ-500 Retirement Notice
Microsoft has announced that the AZ-500 exam and the Microsoft Certified: Azure Security Engineer Associate certification will retire on August 31, 2026. If you are planning to sit for AZ-500, schedule your exam well before that date. Credentials earned before retirement remain valid through their annual renewal cycle.
Choose Your Microsoft Security Exam
Select the certification you are preparing for and start practicing with free timed tests aligned to the official Microsoft skills outlines.
Microsoft Security Certifications Compared
A quick reference covering exam format, difficulty, and key details for SC-900, SC-200, and AZ-500.
| Exam | Credential | Level | Questions | Duration | Passing Score | Fee (USD) | Expires? |
|---|---|---|---|---|---|---|---|
| SC-900 | Security, Compliance & Identity Fundamentals | Fundamentals | 40–60 | 45 min | 700 / 1,000 | $99 | No (permanent) |
| SC-200 | Security Operations Analyst Associate | Associate | 40–60 | 150 min | 700 / 1,000 | $165 | Annual renewal |
| AZ-500 | Azure Security Engineer Associate | Associate | 40–60 | 150 min | 700 / 1,000 | $165 | Retires Aug 31, 2026 |
Exam Domain Weights — All Three Microsoft Exams
Our domain-wise tests are mapped directly to these official weights so your practice reflects the real exam distribution.
SC-900 — 4 Domains (40–60 questions, 45 min)
Describe Concepts of Security, Compliance & Identity (10–15%) | Describe Capabilities of Microsoft Entra (25–30%) | Describe Capabilities of Microsoft Security Solutions (35–40%) | Describe Capabilities of Microsoft Compliance Solutions (15–20%)
SC-200 — 3 Domains (40–60 questions, 150 min) — Updated April 2026
Manage a Security Operations Environment (40–45%) | Respond to Security Incidents (35–40%) | Perform Threat Hunting (20–25%)
AZ-500 — 4 Domains (40–60 questions, 150 min) — Retires August 31, 2026
Secure Identity and Access (15–20%) | Secure Networking (20–25%) | Secure Compute, Storage, and Databases (20–25%) | Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel (30–35%)
Which Microsoft Security Exam Should You Take?
The three exams serve very different audiences and career paths — here is how to choose.
Microsoft Security Certification Pathway
Start with SC-900 if you are new to Microsoft security and want foundational literacy across Microsoft Entra, Defender, Sentinel, and Purview. No prerequisites, no expiry, $99 exam fee. Ideal for career changers, business stakeholders, and anyone building toward SC-200 or AZ-500.
Choose SC-200 if you work in a SOC or security operations role using Microsoft Sentinel, Defender XDR, and Defender for Endpoint. It is the primary certification for detection engineers, threat hunters, and incident responders in Microsoft environments. Updated April 2026.
Choose AZ-500 if you are an Azure administrator or cloud security engineer responsible for securing Azure infrastructure — identity, networking, compute, storage, and Defender for Cloud. Note: this exam retires August 31, 2026.
SC-200 vs AZ-500 — Key Difference
SC-200 and AZ-500 are both associate-level Microsoft security certifications, but they serve different roles. SC-200 is a SOC-focused certification — it validates your ability to detect threats, investigate incidents, hunt for attackers, and automate responses using Microsoft security tools. AZ-500 is an infrastructure-focused certification — it validates your ability to secure Azure resources at the platform level through identity controls, network policies, compute hardening, and security posture management.
In practice: SC-200 is for blue teamers and SOC analysts. AZ-500 is for cloud security engineers and Azure administrators with a security specialization. Many professionals in Azure-heavy organizations benefit from holding both, as the skills complement each other directly.
Frequently Asked Questions
Common questions about Microsoft security certifications and these free practice tests.
Start Practicing for Free — Right Now
No account. No payment. Pick your Microsoft exam and begin immediately.
Authors
-
Security Practice Test Editorial Team is the expert content team at SecurityPracticeTest.com dedicated to producing authoritative cybersecurity certification exam-prep resources. We create comprehensive practice tests, study materials, and exam-focused content for top security certifications including CompTIA Security+, SecurityX, PenTest+, CISSP, CCSP, SSCP, Certified in Cybersecurity (CC), CGRC, CISM, SC-900, SC-200, AZ-500, AWS Certified Security - Specialty, Professional Cloud Security Engineer, OSCP+, GIAC certifications, CREST certifications, Check Point, Cisco, Fortinet, and Palo Alto Networks exams. Our content is developed through careful review of official exam objectives, cybersecurity knowledge domains, and practical job-relevant concepts to help learners build confidence, strengthen understanding, and prepare effectively for certification success.
-
Sudhanshu Thakur: ReviewerEnterprise Technology and Digital Transformation Professional with 18+ years of experience in enterprise software, SaaS, industrial automation, and business consulting. Formerly associated with Rockwell Automation, Tech Mahindra, Emerson, ABB, L&T Infotech, and Hewlett Packard Enterprise.