Compare Microsoft security certification routes for SC fundamentals, architect, operations, identity, information protection, live SC-500 cloud AI security practice, business security, and legacy SC-400 replacement guidance.
Microsoft security pages are grouped separately so candidates can compare SC fundamentals, analyst, architect, identity, information protection, cloud AI security, and business-security routes.
Which Security Route Fits
SC-900: use this route for security, compliance, and identity fundamentals across Microsoft services.
SC-100 and SC-200: use SC-100 for cybersecurity architecture and SC-200 for security operations, detection, incident response, and Microsoft Sentinel/Defender workflows.
SC-300 and SC-401: use SC-300 for identity and access administration and SC-401 for information security, sensitivity labels, data protection, and compliance controls.
SC-500 and SC-730: use SC-500 for cloud and AI security engineering and SC-730 for cybersecurity business-professional routes.
SC-400: use the legacy page only if you arrived from the retired Information Protection Administrator code; move current preparation to SC-401.
Best page to open first
SC-900
: Microsoft Security, Compliance, and Identity Fundamentals
SC-500 is live in IT Mastery with a full cloud-and-AI-security practice page. The other Microsoft Security pages remain exam-specific selection and sample question pages so Notify me updates stay tied to fundamentals, architecture, operations, identity, information protection, or business-security intent.
Review the Microsoft Cybersecurity Architect (SC-100) scope, Zero Trust strategy, governance, operations, data security, identity, and cloud-security design traps before practicing.
Review the Microsoft Security Operations Analyst (SC-200) scope, Microsoft Sentinel, Defender XDR, KQL, incident response, hunting, automation, and triage traps before practicing.
Try 12 Microsoft Identity and Access Administrator (SC-300) sample questions and practice-test preview prompts on Microsoft Entra, authentication, authorization, lifecycle governance, access reviews, and identity administration scope.
Review the Microsoft Identity and Access Administrator (SC-300) scope, Microsoft Entra ID, Conditional Access, MFA, privileged access, app consent, lifecycle, and governance traps before practicing.
Try 12 Microsoft Information Security Administrator (SC-401) sample questions and practice-test preview prompts on information protection, data loss prevention, insider risk, records management, Microsoft Purview controls, and compliance operations scope.
Review the Microsoft Information Security Administrator (SC-401) scope, Microsoft Purview, DLP, sensitivity labels, retention, eDiscovery, audit, insider risk, and data-security traps before practicing.
Prepare for Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500) with a stable, blueprint-mapped IT Mastery bank, public samples, a free diagnostic, identity, Defender, Sentinel, Key Vault, posture, and secure AI workload drills.
Review the Microsoft Cloud and AI Security Engineer Associate (SC-500) scope, identity, posture, storage, compute, networking, and AI workload security traps before practicing in IT Mastery.
Try 12 Microsoft Security, Compliance, and Identity Fundamentals (SC-900) sample questions and practice-test preview prompts on Microsoft Entra, Defender, Purview, governance, security, compliance, and identity fundamentals.
Review Microsoft Security, Compliance, and Identity Fundamentals (SC-900) identity, Zero Trust, Microsoft Entra, Defender, Purview, compliance, and governance traps before using the SC-900 practice page.
Try 12 Microsoft Certified: Cybersecurity Business Professional (SC-730) sample questions and practice-test preview prompts on business security operations, risk reduction, secure productivity, collaboration protection, threat response, and governance decisions.
Review Microsoft Cybersecurity Business Professional (SC-730) business-risk communication, governance, compliance, risk appetite, security metrics, and stakeholder-decision traps before using the SC-730 practice page.