How hard is the SC-100 exam? +
SC-100 is hard because it tests design judgment, not portal configuration. Questions expect you to apply the Microsoft Cybersecurity Reference Architectures, Microsoft Cloud Security Benchmark, Zero Trust guidance, Cloud Adoption Framework, and Well-Architected Framework. Long case studies bury compliance, budget, and existing-tooling constraints in dense text, and the technically strongest design loses if it breaks one of them.
What is the SC-100 exam format? +
SC-100 is a 100-minute exam with a variable number of questions, often around 40 to 60. It includes case studies with multiple questions each, plus multiple choice, drag-and-drop, and other Microsoft item types. You can take it at a Pearson VUE test center or online with remote proctoring. Once you finish a case study section you cannot go back to it.
What is the SC-100 passing score? +
You need a scaled score of 700 out of 1,000. Microsoft scales scores, so 700 is not 70% of questions correct - items can carry different weights and the number of questions varies. Your score report shows relative performance by skill area, which is useful for targeting a retake but does not give per-question results.
Do I need another certification to earn the Cybersecurity Architect Expert? +
Yes. Passing SC-100 alone does not award the Expert certification. You also need one associate certification: Identity and Access Administrator (SC-300), Security Operations Analyst (SC-200), or Cloud and AI Security Engineer. You can sit SC-100 first, but the badge only appears once the prerequisite is also complete. The exam costs 165 USD in the US, with regional pricing elsewhere.
What is the retake policy and renewal for SC-100? +
If you fail, you can retake after 24 hours. After a second failure the wait is 14 days, and you are limited to five attempts in 12 months. Each attempt is paid. The Expert certification is valid for one year and renews through a free online assessment on Microsoft Learn, which you can take in the six months before expiry.
How long should I prepare for SC-100? +
Candidates who already hold a Microsoft security associate certification typically need 4 to 8 weeks. Most of that time should go into the reference architectures and frameworks, plus newer content on securing AI adoption, Microsoft 365 Copilot data controls, and Entra Agent ID. Practicing long case studies under time pressure matters as much as knowing the products.