Microsoft SecurityMicrosoft Certified: Security Operations Analyst Associate
The Security Operations Analyst Associate proves that you can triage, investigate and respond to threats with Microsoft Defender XDR, Microsoft Sentinel and Microsoft Defender for Cloud, hunting with KQL and automating responses. It is held by analysts in security operations centres who reduce organisational risk day to day.
The certification requires exam SC-200, with Security, Compliance, and Identity Fundamentals as a useful foundation. Candidates usually know Microsoft 365, Azure and common operating systems, and our SC-200 course follows realistic security operations scenarios with guided investigations, KQL practice and an exam-readiness review.
Your path to certification
Prepare
Recommended: Microsoft Certified: Security, Compliance, and Identity Fundamentals
Train
1 course with an instructor
Sit the exam
SC-200
Stay current
Renew every year by passing the free online renewal assessment on Microsoft Learn before your certification expires.
Where do you sit the exam? At our test centre
Microsoft role-based exams are delivered through Pearson VUE at our Authorised Test Centre in Mazzeh. We confirm the exact exam and version with you before you book.
Preparation courses
Renewal and validity
Role-based certifications are valid for one year, and the renewal assessment opens on Microsoft Learn six months before expiry; it is shorter than the original exam, unproctored and open book, and each pass extends the certification by a year from its expiry date. Microsoft revises its renewal rules from time to time, so check the current policy on Microsoft Learn before you plan.
Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.