Microsoft certification training
Pass the exam. Understand the product.
Tutor-led preparation for nine Microsoft security, identity, endpoint and Azure exams, taught by Microsoft Certified Trainers against Microsoft’s current skills outlines.
- Taught by Microsoft Certified Trainers
- The exam fee is paid to Microsoft, not to us
Microsoft certification levels
- FundamentalsSC-900 · AZ-900No prerequisites
- AssociateSC-200 · SC-300 · SC-401 · SC-500 · MD-102 · AZ-104What most adverts ask for
- ExpertSC-100Needs an associate behind it
Nine exams, taught by Microsoft Certified Trainers
The exams
Nine exams. Open one to see inside it.
A quick look at each: what Microsoft measures and how heavily, who it’s for and where it leads. Full course details are on each course page, and Microsoft’s own page always has the current outline.
Fundamentals
Associate
Expert
Microsoft Security · Fundamentals
Microsoft Certified: Security, Compliance, and Identity Fundamentals
Exam SC-900
The right first certification if you are new to security or new to Microsoft’s security stack. You learn how identity, threat protection and compliance fit together across Azure and Microsoft 365 – Entra, Defender, Sentinel and Purview – in plain English, before any of it is asked of you at depth.
What Microsoft measures
Weightings are Microsoft’s. Microsoft updates the skills outline on 21 October 2026 – minor changes to the detail; the areas and weightings below stay the same. Microsoft revises its outlines from time to time; its official SC-900 page always has the current one.
- Who it’s for
- Newcomers, career changers, students, and IT or business staff who work alongside security. No prerequisites.
- Where it leads
- Most people go on to SC-200 (security operations), SC-300 (identity and access) or SC-401 (information security) – or into the Blue Team Analyst programme if the goal is a SOC role rather than a certificate.
Microsoft Azure · Fundamentals
Microsoft Certified: Azure Fundamentals
Exam AZ-900
Everything that sits under cloud security, taught first. You learn how Azure is organised, what its core compute, network and storage services do, and how cost, governance and monitoring work – so that later security training is about protecting something you already understand.
What Microsoft measures
Weightings are Microsoft’s. The skills outline was last revised on 20 July 2026 (minor changes). Microsoft revises its outlines from time to time; its official AZ-900 page always has the current one.
- Who it’s for
- Anyone starting a career in cloud or security, and IT staff new to Azure. No prerequisites.
- Where it leads
- The natural next step is AZ-104 (Azure administration). If security is the goal, SC-900 pairs well with it.
Microsoft Security · Associate
Microsoft Certified: Security Operations Analyst Associate
Exam SC-200
The certification for SOC work on Microsoft’s stack. You learn to run the security operations environment in Microsoft Sentinel and Defender XDR, respond to incidents across identity, endpoint, email and cloud, and hunt for threats with KQL – including Security Copilot and the agentic AI features now in the exam.
What Microsoft measures
Weightings are Microsoft’s. Microsoft updates the skills outline on 21 October 2026 – minor changes to the detail; the areas and weightings below stay the same. Microsoft revises its outlines from time to time; its official SC-200 page always has the current one.
- Who it’s for
- SOC analysts, and IT or security staff moving into security operations on Microsoft. Familiarity with Microsoft 365, Azure and Windows helps.
- Where it leads
- SC-200 is one of the prerequisite routes to SC-100 (Cybersecurity Architect Expert). If you want the day-to-day SOC skills around the exam – alert queues, case notes, a shift simulation – see the Blue Team Analyst programme.
Microsoft Security · Associate
Microsoft Certified: Identity and Access Administrator Associate
Exam SC-300
Identity is where most attacks start and where most defences are decided. You learn to design, implement and operate identity and access in Microsoft Entra: users and hybrid identity, authentication and Conditional Access, workload and application identities, and governance with access reviews and Privileged Identity Management.
What Microsoft measures
Weightings are Microsoft’s. The skills outline was last revised on 27 April 2026. Microsoft revises its outlines from time to time; its official SC-300 page always has the current one.
- Who it’s for
- IT administrators and security staff who manage identity, or want to. Familiarity with Azure, Microsoft 365 and Active Directory helps.
- Where it leads
- SC-300 is a prerequisite route to both SC-100 (Cybersecurity Architect Expert) and the Microsoft 365 Administrator Expert certification.
Microsoft Security · Associate
Microsoft Certified: Information Security Administrator Associate
Exam SC-401
Protecting the data itself, wherever it goes – including into AI tools. You learn to classify and label sensitive information with Microsoft Purview, prevent it leaking with DLP, keep and dispose of it correctly with retention, and investigate insider risk and security alerts.
What Microsoft measures
Weightings are Microsoft’s. The skills outline is revised on 28 October 2026 (minor changes). Microsoft revises its outlines from time to time; its official SC-401 page always has the current one.
- Who it’s for
- IT and security staff responsible for data protection, compliance or Microsoft 365 security. Familiarity with Microsoft 365, PowerShell and the Defender portal helps.
- Where it leads
- SC-401 is one of the prerequisite routes to the Microsoft 365 Administrator Expert certification.
Microsoft Security · Associate
Microsoft Certified: Cloud and AI Security Engineer Associate
Exam SC-500
The security engineer certification that replaced AZ-500 in 2026 – now covering AI workloads as well as cloud. You learn to secure identity, secrets and governance, storage, databases and networks, servers, containers and application platforms, and the data and agents behind AI, then monitor posture with Defender for Cloud and Sentinel.
What Microsoft measures
Weightings are Microsoft’s. SC-500 replaced AZ-500, which retired on 31 August 2026. Microsoft revises its outlines from time to time; its official SC-500 page always has the current one.
- Who it’s for
- Security and cloud engineers with hands-on Azure administration experience.
- Where it leads
- SC-500 builds naturally on AZ-104, and leads towards SC-100 (Cybersecurity Architect Expert).
Microsoft 365 · Associate
Microsoft 365 Certified: Endpoint Administrator Associate
Exam MD-102
Managing and securing every device an organisation owns – Windows, macOS, iOS and Android – with Microsoft Intune. You learn enrolment and Autopilot, configuration and compliance, endpoint security and updates, app deployment and protection, and the automation and reporting that keep a fleet healthy.
What Microsoft measures
Weightings are Microsoft’s. The skills outline was substantially revised on 24 July 2026 – the exam is now titled “Managing and Securing Microsoft 365 Endpoints by using Intune”. Microsoft revises its outlines from time to time; its official MD-102 page always has the current one.
- Who it’s for
- Desktop, endpoint and Microsoft 365 administrators. Hands-on experience with Windows and Microsoft 365 helps.
- Where it leads
- MD-102 is one of the prerequisite routes to the Microsoft 365 Administrator Expert certification.
Microsoft Azure · Associate
Microsoft Certified: Azure Administrator Associate
Exam AZ-104
The working knowledge of Azure that every cloud and cloud-security role assumes. You learn to manage identities and governance, storage, compute, virtual networking, monitoring and backup – hands-on, the way an administrator actually does it.
What Microsoft measures
Weightings are Microsoft’s. The skills outline was last revised on 17 April 2026. Microsoft revises its outlines from time to time; its official AZ-104 page always has the current one.
- Who it’s for
- IT professionals moving into cloud administration. Experience with operating systems, networking and PowerShell or the Azure CLI helps.
- Where it leads
- From AZ-104, cloud-security roles usually lead to SC-500 (Cloud and AI Security Engineer).
Microsoft Security · Expert
Microsoft Certified: Cybersecurity Architect Expert
Exam SC-100
For experienced practitioners stepping up to architecture. You learn to turn a security strategy into designs that protect a whole organisation – resilience against ransomware, Zero Trust aligned to Microsoft’s reference architectures and benchmark, and security for operations, identity, infrastructure, applications, data and AI.
What Microsoft measures
Weightings are Microsoft’s. Microsoft updates the skills outline on 21 October 2026 – minor changes to the detail; the areas and weightings below stay the same. Microsoft revises its outlines from time to time; its official SC-100 page always has the current one.
- Who it’s for
- Experienced security professionals with expert skills in at least one area – identity, platform protection, security operations, or data and AI security. Not a starting point.
- Before the certification is awarded
- To be awarded the Expert certification you also need one of the associate certifications Microsoft lists as prerequisites (SC-200 and SC-300 among them) – check Microsoft’s certification page for the current list.
How it runs
Live teaching, your own tenant.
Taught against the outline you’ll be examined on, with the hands-on practice that makes the questions make sense.
How the training runs
- Live, tutor-led online classes in UK hours
- Taught by a Microsoft Certified Trainer
- Hands-on practice in your own Microsoft 365 or Azure trial tenant, with setup guidance
- Mapped to Microsoft’s published skills outline, domain by domain
What happens after you enrol
- You get an order confirmation by email. Straight away.
- We agree your start date and schedule. In UK hours, around your job.
- We set up your learning account. We email you how to sign in before your first class. Our new learning portal opens soon.
- You book the exam when you are ready. We will tell you honestly when that is.
About the exam
The rules are Microsoft’s. Here they are.
MyCyberWay is an independent training provider. Microsoft awards the certification when you pass its exam, which you book and pay for separately.
- Pass mark
- 700 or moreOn Microsoft’s scoring scale
- Exam fee
- Not includedPaid to Microsoft when you book, at its price for your country
- When to book
- When you’re readyWe’ll tell you honestly when that is
- Practise first
- Free practice assessmentAnd an exam sandbox, for most exams
- Associate and Expert
- Valid for a yearRenewed free with an online assessment on Microsoft Learn
- Fundamentals
- Don’t expireSC-900 and AZ-900
What’s changing in 2026
Microsoft moves the goalposts. We keep up.
Exams retire and outlines change every year. This is where things stand, so you don’t train for an exam that’s about to disappear.
AZ-500 has retired. SC-500 replaces it.
AZ-500 retired on 31 August 2026. SC-500, Cloud and AI Security Engineer, took its place and adds AI workloads. If you hold AZ-500 it stays on your transcript, but it can’t be renewed and there’s no transition exam.
MS-102 retires on 30 November 2026.
Don’t start it now. Its replacement, AB-650 (Microsoft 365 and AI Services Administrator), is in beta – ask us if it’s on your list.
Skills outlines are updating.
SC-900, SC-200 and SC-100 update on 21 October 2026 and SC-401 on 28 October – minor changes. MD-102 was substantially revised in July. We teach the outline in force when you sit the exam.
Also from Microsoft
Other Microsoft security certifications, on request.
Not on our regular timetable, but close enough to what we teach that we can prepare you for them. Ask us.
Want the job, not just the certificate?
An exam proves you know it. A programme proves you can do it.
Our blue team programmes teach the work behind these exams, live, in your own lab – with your CV, LinkedIn and mock interviews included.
Investigate · pairs with SC-200
Blue Team Analyst
A first SOC role, from no security experience.
See the programmeRespond · goes past SC-200
Blue Team Specialist
Investigations, threat hunting and root cause.
See the programmeBuild · overlaps SC-200, SC-300, SC-500
Blue Team Engineer
Design and build the controls, in your own tenants.
See the programmeQuestions
Before you book.
Are the exam fees included?
No. You pay Microsoft directly when you book the exam, at its price for your country. Our course fee covers the training only.
Which exam should I take first?
Usually SC-900 if security is new to you, or AZ-900 if Azure is. After that it depends on the role you want – certification guidance maps eleven roles to the exams in order.
Do you guarantee a pass?
No, and nobody honest can. We teach to Microsoft’s outline, give you practice in a real tenant, and tell you honestly when we think you’re ready to book.
How do I book the exam?
Through Microsoft Learn, when you’re ready. You can sit most Microsoft exams online or at a test centre.
I hold AZ-500. Do I need SC-500?
AZ-500 retired on 31 August 2026. Your certification stays on your transcript, but it can no longer be renewed and there is no transition exam. To hold the current security engineer certification you pass SC-500.
Are you Microsoft?
No. MyCyberWay is an independent training provider, and our trainers are Microsoft Certified Trainers. Microsoft awards the certification when you pass its exam.
How is this different from your blue team programmes?
These courses prepare you for one exam. The programmes teach a whole job over 26 to 30 live classes, with marked assignments, your own labs and career support. Compare them side by side.
Not sure which exam?
Twenty minutes, free, and a straight answer.
Tell us your role and where you want to be. We’ll tell you which exam is worth your money – and which isn’t yet.
Microsoft, Azure, Microsoft 365, Entra, Defender, Sentinel, Purview, Intune and GitHub are trademarks of the Microsoft group of companies. Certification badges are shown only to identify the certification a course prepares you for. MyCyberWay is an independent training provider only.
