Description
The right first certification if you are new to security or new to Microsoft’s security stack. You learn how identity, threat protection and compliance fit together across Azure and Microsoft 365 – Entra, Defender, Sentinel and Purview – in plain English, before any of it is asked of you at depth.
Who it is for: Newcomers, career changers, students, and IT or business staff who work alongside security.
What the exam covers
Weightings are Microsoft’s. Microsoft updates the skills outline on 21 October 2026 – minor changes to the detail; the areas and weightings below stay the same.
-
Security, compliance and identity concepts 10–15% of the exam
Shared responsibility, defence in depth, Zero Trust, encryption and hashing, governance, risk and compliance – and what authentication, authorisation, identity providers and federation actually mean.
-
Microsoft Entra 25–30% of the exam
Entra ID and its identity types, hybrid identity, authentication methods and MFA, password protection, Conditional Access and roles, and governance: access reviews, Privileged Identity Management and ID Protection.
-
Microsoft security solutions 35–40% of the exam
Azure infrastructure protection (DDoS, Firewall, WAF, network segmentation, Bastion, Key Vault), Defender for Cloud and CSPM, Sentinel as SIEM and SOAR, and the Defender XDR family.
-
Microsoft compliance solutions 20–25% of the exam
The Service Trust Portal and Microsoft’s privacy principles, Purview and Compliance Manager, data classification, sensitivity labels, DLP, retention and records, insider risk, eDiscovery and audit.
How the training runs
- Live, tutor-led online classes in UK hours
- Taught by a Microsoft Certified Trainer
- Hands-on practice in your own Microsoft 365 or Azure trial tenant, with setup guidance
- Mapped to Microsoft’s published skills outline, domain by domain
About the exam
- You need a score of 700 or more to pass.
- Microsoft offers a free practice assessment and an exam sandbox for most exams – use both before you book.
- The exam fee is not included. It is paid to Microsoft when you book.
- Fundamentals certifications do not expire.
Where it leads
Most people go on to SC-200 (security operations), SC-300 (identity and access) or SC-401 (information security) – or into the Blue Team Analyst programme if the goal is a SOC role rather than a certificate.
What happens after you buy
- You get an order confirmation by email Straight away.
- We agree your start date and schedule In UK hours, around your job.
- We set up your learning account We email you how to sign in before your first class. Our new learning portal opens soon.
- You book the exam when you are ready We will tell you honestly when that is.
MyCyberWay is an independent training provider. Microsoft certifications are awarded by Microsoft when you pass its exam; the exam is booked and paid for separately, and its fee is set by Microsoft for your country. We do not guarantee a pass – but we will tell you honestly when we think you are ready.
