logo
Azure助理级🔒 安全

Microsoft Certified: Security Operations Analyst Associate (SC-200)

SC-200 安全运营分析师认证备考题库,涵盖 Microsoft Sentinel、Defender XDR 和威胁搜寻,46+ 道真题附详细解析。

$0
Exam Fee
46
Questions
90m
Exam Duration
70/100
Passing Score
MEMBERSHIP

JR Academy Membership

Unlock all certifications, courses & tools at a fraction of the cost

  • All certification exam prep included
  • Course discounts up to 50%
  • AI tools & Chrome extensions
  • Priority 1-on-1 coaching
View Membership Plans

What this certification covers

This page is structured for quick scanning first: exam format, fit, prep time, and the actual study scope.

You will work with

Microsoft SentinelMicrosoft Defender XDRKQL (Kusto Query Language)威胁搜寻与检测安全事件响应SIEM/SOAR 自动化安全运营环境管理Microsoft Defender for Cloud

After preparation

  • Pass the SC-200 certification exam with confidence
  • Master key concepts across all exam domains
  • Identify and strengthen weak areas before the exam

Exam details

Exam Code
SC-200
Provider
Microsoft Azure
Duration
90 minutes
Question Count
46 questions
Passing Score
70/100
Validity
3 years
Exam Fee
$0 USD
Question Types
single-choice, multiple-choice
Languages
English
Official Page

Who should take it

Good fit

  • SOC 安全运营中心分析师(Tier 1/Tier 2)
  • 安全运营工程师和 SIEM 工程师
  • 威胁猎手和事件响应专业人员
  • 希望进入微软安全生态的 IT 专业人员

Before you start

  • 具备 Azure 基础知识(AZ-900 或 AZ-104 水平)
  • 理解网络安全基本概念(防火墙、加密、身份认证)
  • 熟悉 KQL(Kusto Query Language)基本语法
  • 了解 Microsoft 365 安全服务生态

Study preparation

With hands-on AWS

4-6 weeks

From scratch

8-10 weeks

Daily pace

1-2 hours/day

Learning path preview

8 chapters
1
SC-200 Exam Overview
40 min
2
Microsoft Sentinel
30 min
3
Defender for Endpoint
30 min
4
Defender for Cloud
30 min
5
KQL Queries
30 min
6
Threat Hunting
30 min
+ 2 more chapters inside the full path

Certification comparison

SC-200AI-100AI-102
ProviderAzureAzureAzure
Level助理级助理级助理级
Fee$0$0$0
Duration90 min90 min90 min
Question count466565
Validity3 yrs3 yrs3 yrs

Study tips and common mistakes

💡

46 题 90 分钟,平均每题 2 分钟,合理分配时间

💡

及格分 70/100,不确定的题先标记跳过,回头再做

💡

排除法非常有用 — 先排掉明显错误的选项,剩下的再分析

⚠️

没有读完所有选项就选答案 — 题目经常有"最佳"答案和"正确但不最佳"的干扰项

⚠️

备考只刷题不理解原理 — 考试场景题需要理解底层概念

⚠️

忽略时间管理 — 在难题上卡太久,导致后面简单题没时间做

FAQ

Frequently Asked Questions

If you plan to take SC-200, start with real practice.

46+ questions, chapter-by-chapter learning, mock exams, wrong-question review, and AI tutor support live in the exam page.

Go to exam prep

From $29 · 2 free chapters

Related certifications