Skip to content
CBT Nuggets
DemoBook a Demo

Microsoft Certified: Cybersecurity Architect Expert (SC-100)

This Microsoft Certified: Cybersecurity Architect Expert (SC-100) training covers how to design a large network's protective security architecture, grounded in the Zero Trust strategy. You'll master the Microsoft Cybersecurity Reference Architecture (MCRA) and Zero Trust principles to design resilient security strategies for SaaS, PaaS, and IaaS environments. As you learn to translate complex requirements into technical safeguards (from Entra Global Secure Access to advanced identity and data protection) you'll gain the high-level skills necessary to secure enterprise infrastructures and pass the SC-100 exam.

Updated February 2023

12Skills
83Videos
1Practice Exam
11hTotal

Who This Course Is For

This SC-100 training is designed for senior security engineers and architects with extensive experience in identity, networking, and virtualization. It is the definitive path for professionals seeking the Microsoft Certified Cybersecurity Architect Expert credential to lead enterprise-wide security strategy.

Skills Your Team Will Gain

  • Designing security strategies for SaaS, PaaS, and IaaS cloud services
  • Securing server endpoints and client devices across hybrid environments
  • Evaluating security postures using Microsoft Defender for Cloud and MCRA
  • Implementing Zero Trust through Identity, Conditional Access, and PIM
  • Architecting data protection and application security using encryption standards
  • Configuring Global Secure Access with Entra to protect private and internet traffic

Course Curriculum

One skill is free to watch — no signup needed. The other 11 premium skills unlock for your whole team with a CBT Nuggets plan.

Free skill preview

Examining the Microsoft Cybersecurity Reference Architecture (MCRA)

Bob SalmansDuration: 1h 9m20 videos

Watch this complete skill free — the same trainer, videos, and labs your team gets with a plan.

Watch free skill
  • Examining the Microsoft Cybersecurity Reference Architecture (MCRA)Free1h 9m · 20 videos
  • Premium skill.Translating Security Requirements60m · 16 videos
  • Premium skill.Designing Security Strategies54m · 12 videos
  • Premium skill.Designing a Security Operations Strategy57m · 18 videos
  • Premium skill.Designing an Identity Security Strategy57m · 16 videos
  • Premium skill.Designing a Regulatory Compliance Strategy53m · 14 videos
  • Premium skill.Evaluating and Managing Security Postures51m · 14 videos
  • Premium skill.Designing a Strategy for Securing Server and Client Endpoints58m · 14 videos
  • Premium skill.Designing a Strategy for Securing SaaS, PaaS, and IaaS Services50m · 14 videos
  • Premium skill.Design a security strategy for data and applications1h 13m · 16 videos
  • Premium skill.Entra Global Secure Access - Introduction47m · 15 videos
  • Premium skill.Entra Global Secure Access - Configuration51m · 19 videos
Want to browse the locked skills?
with no purchase required. Already have an account?

An account gets you the full catalog to browse, pre-assessments, quiz questions on free skills, and IT Trainerbot, with every answer citing its source video.

Certification

Microsoft Certified: Cybersecurity Architect Expert (SC-100)

The Microsoft Certified: Cybersecurity Architect Expert validates your skills in designing and maintaining a secure computing environment. This certification is ideal for cybersecurity architects who want to demonstrate their expertise in protecting ...

Exam SC-100Level ExpertDifficulty AdvancedCost $165 USD
Designing Zero Trust strategiesEvaluating security postureDesigning security operationsManaging identity and accessImplementing compliance controls
Official certification page

Put this course to work for your team

Every plan includes this course plus the full library, virtual labs, and practice exams — or talk it through with sales.

For IT leaders

What IT leaders need to know before assigning this course

Security architecture programs stall when teams can’t translate Zero Trust principles, regulatory requirements, and Microsoft security capabilities into an actionable enterprise design. This expert-level SC-100 training is best assigned to cybersecurity architects, senior security engineers, and experienced IT Practitioners with roughly 3–5 years of security architecture experience—not entry-level admins.

Plan for about 11 hours and 20 minutes per learner, plus review time for exam preparation and internal design discussions. For change management, IT Directors and Team Leads can assign sections by role: identity strategy, security operations, compliance, endpoint protection, cloud services, data, applications, and Entra Global Secure Access configuration.

CBT Nuggets can support rollout with role-based Playlists, Practice Exams for certification readiness, and Team Reporting to track completion and knowledge checks across the security team.

Team Impact

How this training helps your team succeed

IT teams complete this SC-100 training to move from ad hoc security decisions to architecture patterns aligned with Microsoft’s Cybersecurity Reference Architecture and Zero Trust strategy.

  • Standardize security design conversations: Architects learn to translate business, security, and compliance requirements into practical security strategies.
  • Improve operational resilience: Teams evaluate security operations strategy, identity security, posture management, and endpoint protection to reduce preventable gaps.
  • Support audit and compliance work: Security leaders can align regulatory compliance strategy with architecture decisions instead of treating compliance as a separate checklist.
  • Secure Microsoft cloud adoption: Teams design strategies for SaaS, PaaS, IaaS, data, applications, and Entra Global Secure Access configuration.

After completion

Capabilities your team walks away with

Knowledge

  • Microsoft Cybersecurity Reference Architecture concepts and how they support Zero Trust design
  • How to translate security and business requirements into architecture decisions
  • Security operations, identity security, and regulatory compliance strategy considerations
  • Methods for evaluating and managing security posture across environments
  • Security design patterns for endpoints, cloud services, data, and applications
  • Entra Global Secure Access concepts and configuration considerations

Ability

  • Design security strategies for enterprise Microsoft environments
  • Align architecture recommendations with compliance and risk requirements
  • Evaluate identity, endpoint, SaaS, PaaS, and IaaS security approaches
  • Plan protection strategies for server and client endpoints
  • Recommend security controls for data and application architectures
  • Prepare for the Microsoft Certified: Cybersecurity Architect Expert (SC-100) certification path

Readiness check

Confirm prerequisite knowledge before training begins

A short placement assessment on the CBT Nuggets assessments platform measures whether a learner already has the foundation this course assumes. IT Directors use it to put the right people in the right training — and any learner can take it right now to make sure they'll get full value from day one.

  • Questions generated from this course's own video transcripts — what gets measured is exactly what gets taught
  • Instant, per-learner results that show whether the prerequisite foundation is in place
  • Results roll up into team readiness reporting, so training hours go where they change outcomes
Runs on assessments.cbtnuggets.com — sign in with an Adept account so results roll up into team readiness reporting. Need one?
.

If gaps show up, start here

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)

This Microsoft SC-900 training prepares you to earn your Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) certification. You'll learn the fundamentals of security, compliance, and identity (SCI) within the Microsoft servi...

~22h

This course is included with every subscription

Unlock this one course, or get one learner — or your whole team — access to all 287 courses, virtual labs, and practice exams.

Course Unlock

Just need this course?

$169one time

No subscription

One year of access to SC-100

  • Every skill in this course
  • Its virtual labs and practice exam
  • Ask IT Trainerbot about it — free

CBT Nuggets Individual

IT Trainerbot Pro

$49per month

Billed annually

Every course, for one learner

See Individual pricing
For IT teams

CBT Nuggets Teams

IT Trainerbot for Teams

$59per seat / mo

Billed annually

From 1 learner seat · unlimited admin seats

Checking your access

Need tenant hosting, reseller terms, or payment plans on a larger agreement? Book a Demo to discuss an Enterprise contract.

See plans and pricing for your team

Trusted by 23,000+ organizations

Frequently Asked Questions

Is Microsoft Certified: Cybersecurity Architect Expert (SC-100) worth it?

Yes, for cybersecurity professionals, cloud specialists, and IT architects, the Microsoft Certified Cybersecurity Architect Expert (SC-100) is probably worth it. Your specific career goals will determine whether or not it's worth it, but if you're already working in cybersecurity and have experience with Microsoft technologies, there aren't many certifications better than the Cybersecurity Architect Expert for validating advanced expertise.

How much does the SC-100 cost?

The Microsoft Certified: Cybersecurity Architect Expert certification exam SC-100 costs $165. However, it's not the only cost associated with the certification. You must pass one of three prerequisites: Azure Security Engineer Associate; Identity and Access Administrator Associate; or Security Operations Analyst Associate – each of which cost $165. Therefore the total cost of earning Cybersecurity Architect Expert is at least $660, even though its exam SC-100 itself only costs $165.

Is the Cybersecurity Architect Expert (SC-100) exam difficult?

Yes, if you're planning on earning the Microsoft Certified: Cybersecurity Architect Expert, you should plan on the SC-100 being a difficult exam. Building on prerequisite knowledge in identity and access management as well as security operations, the SC-100 dives deep into technical familiarity with mitigating network security threats with Microsoft technologies. Plan on the exam requiring specific expertise and deep familiarity with Microsoft security tools.

Does Cybersecurity Architect Expert (SC-100) certification expire?

Yes, like all of their role-based (associate and expert) certifications, the Microsoft Certified: Cybersecurity Architect Expert expires after one year. Fortunately, Microsoft offers free renewal certification exams for each of those certifications, including the Cybersecurity Architect Expert, available within six months of your cert expiring. The exams tend to cover recent updates and changes to the knowledge and skill areas tested in the original exam.

How to study for SC-100?

The best way to study for the Microsoft Certified: Cybersecurity Architect Expert exam SC-100 is with a balance of theory and practice. As a cybersecurity architect, you'll need to know how to design security solutions that align with industry best practices as well as infrastructural, application/data and compliance requirements. Once you understand the concepts of those priorities and requirements, practice actually building those security solutions and implementing them with Microsoft security tools.

Ready to upskill your team?

Talk to our sales team to find the right plan for your organization.