How hard is the SC-300 exam? +
SC-300 is moderately hard, and harder than it looks for admins who mostly manage users and groups. Conditional Access questions combine assignments, exclusions, grant controls, and session controls, where misreading one exclusion changes the result. Identity governance features - entitlement management, access reviews, PIM, and lifecycle workflows - overlap in purpose, and the exam asks which one fits a specific requirement.
What is the SC-300 exam format? +
SC-300 runs 100 minutes with a variable question count, typically 40 to 60. Expect multiple choice, drag-and-drop, and case studies, and possibly hands-on lab items. You can test at a Pearson VUE center or online with remote proctoring. Case study sections lock once you leave them, so manage time before moving on.
What is the SC-300 passing score? +
You need 700 on a scale of 1 to 1,000. The score is scaled, so it does not equal 70% of questions correct. Your score report shows relative strength by skill area, which you can use to target a retake, but Microsoft does not release which questions you missed.
How much does SC-300 cost and how is it renewed? +
SC-300 costs 165 USD in the US, with regional pricing elsewhere, and has no prerequisites. The Identity and Access Administrator Associate certification is valid for one year and renews free through an online assessment on Microsoft Learn. Retakes follow Microsoft's policy: 24 hours after the first failure, 14 days after later ones, up to five attempts in 12 months.
What topics carry the most weight on SC-300? +
Authentication and access management is the largest area at 25-30%, centered on MFA, authentication methods, and Conditional Access. Workload identities - managed identities, service principals, app registrations, and enterprise apps - carry 20-25%. The exam also now covers Global Secure Access, including Entra Internet Access and Private Access, which many admins have never deployed.
How long should I prepare for SC-300? +
Admins with daily Entra ID experience typically need 4 to 6 weeks. Budget extra time for areas you do not touch at work: Global Secure Access, workload identities, and identity governance. Hands-on practice in a test tenant helps, especially for Conditional Access and PIM, since questions test exact behavior rather than general concepts.