Microsoft Security Operations Analyst (SC-200)
Unlimited SC-200 practice exam retakes, each drawn fresh from a question pool weighted by the official exam domains — covering managing a security operations environment (Defender XDR + Sentinel automation, SIEM platform configuration, data ingestion, and detection engineering), responding to security incidents across Defender XDR and Microsoft Defender for Endpoint, and performing threat hunting with KQL, Sentinel Graph, hunting notebooks, and the Sentinel MCP Server. Aligned to the official Microsoft Security Operations Analyst (SC-200) study guide (skills measured as of April 16, 2026).
Exam mode Default
100-minute timer, flag for review and a review screen before you submit — just like test day.
Practice mode
See the correct answer, the exam domain and a full explanation after every question.
What you get
- A 195-question pool — every attempt draws 65 fresh questions weighted by the official exam domains
- Unlimited retakes, lifetime access
- Score report by exam domain, with your score trend over time
- Answer review with explanations and reference links
- Original, blueprint-aligned questions — never exam dumps
Ready to sit the real SC-200 exam?
Get the official exam voucher and this practice exam is included free (worth US$20.00).
Exam domains
Every attempt draws questions in these official proportions. Open a domain to see the subtopics it covers.
Manage a security operations environment41%
- Configure automation for Microsoft Defender XDR and Microsoft Sentinel
- Configure the Microsoft Sentinel SIEM and platform
- Ingest data into the Microsoft Sentinel SIEM and platform
- Configure detections
Respond to security incidents37%
- Respond to alerts and incidents in Microsoft Defender XDR
- Respond to alerts and incidents in Microsoft Defender for Endpoint
- Investigate Microsoft 365 activities to identify threats
Perform threat hunting22%
- Identify threats by using Kusto Query Language (KQL)
- Create Advanced Hunting queries in Microsoft Defender XDR
- Interpret threat analytics in Microsoft Defender XDR
- Create hunting graphs, including blast radius
- Analyze relationships between entities by using Sentinel Graph
- Create and monitor hunting queries in Microsoft Sentinel
- Create and manage KQL jobs in Data lake
- Hunt for threats by using Notebooks, including connection to the Sentinel MCP Server
References
- Official exam page:learn.microsoft.com
- Official study guide:learn.microsoft.com
Student reviews
No reviews yet — be the first to share your experience.
Tertiary Exams provides original practice questions for learning. We are not affiliated with Microsoft, and we do not provide real exam dumps.