Exam SC-200: Microsoft Security Operations Analyst

Exam SC-200: Microsoft Security Operations Analyst (beta) is the newest beta certifications.

Microsoft just released 3 new Security, Compliance and Identity certifications.

One of them is Security Operations Analyst Associate (Exam SC-200)

Exam SC-200: Microsoft Security Operations Analyst (beta)

The Microsoft Security Operations Analyst collaborates with organizational stakeholders to secure information technology systems for the organization.

Their goal is to reduce organizational risk by rapidly remediating active attacks in the environment, advising on improvements to threat protection practices, and referring violations of organizational policies to appropriate stakeholders.

Responsibilities include threat management, monitoring, and response by using a variety of security solutions across their environment.

The role primarily investigates, responds to, and hunts for threats using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products.

Since the Security Operations Analyst consumes the operational output of these tools, they are also a critical stakeholder in the configuration and deployment of these technologies.

*The first 300 people who register, using code SC200PELHAM, can take this exam for an 80% discount! The seats are offered on a first-come, first-served basis. You must register for the exam on or before March 8, 2021. Take the exam as soon as possible, so we can leverage your comments, feedback, and exam data in our evaluation of the quality of the questions. This is NOT a private access code. You can use this code to register for and take the exam on or before March 8, 2021.

You should also be aware that there are some countries where the beta code will not work (including Turkey, Pakistan, India, and China). You will not be able to take the beta exam in those countries.

Part of the requirements for: Microsoft Certified: Security Operations Analyst Associate

Skills measured

Mitigate threats using Microsoft 365 Defender (25-30%)
Mitigate threats using Azure Defender (25-30%)
Mitigate threats using Azure Sentinel (40-45%)

Learning Paths for Exam SC-200: Microsoft Security Operations Analyst (beta)

1) SC-200 part 1: Mitigate threats using Microsoft Defender for Endpoint

2) SC-200 part 2: Mitigate threats using Microsoft 365 Defender

3) SC-200 part 3: Mitigate threats using Azure Defender

4) SC-200 part 4: Create queries for Azure Sentinel using Kusto Query Language (KQL)

5) SC-200 part 5: Configure your Azure Sentinel environment

6) SC-200 part 6: Connect logs to Azure Sentinel

7) SC-200 part 7: Create detections and perform investigations using Azure Sentinel

8) SC-200 part 8: Perform threat hunting in Azure Sentinel