We're so confident of our products that we provide no hassle product exchange.
Skills measured
- Implement an authentication and access management solution (25-30%)
- Plan and implement an identity governance strategy (25-30%)
- Implement an identity management solution (25-30%)
- Implement access management for apps (10-15%)
Microsoft SC-300 Exam Overview:
| Certification Vendor: | Microsoft |
| Exam Name: | Microsoft Identity and Access Administrator |
| Exam Number: | SC-300 |
| Exam Price: | $165 USD |
| Related Certifications: | Microsoft Certified: Security Administrator Associate Microsoft Certified: Enterprise Administrator Expert |
| Exam Duration: | 100–120 |
| Available Languages: | English, Japanese, Chinese (Simplified), Korean, French, German, Spanish, Portuguese (Brazil) |
| Passing Score: | 700 (out of 1000) |
| Real Exam Qty: | 40–60 |
| Exam Format: | Multiple choice, Case studies, Drag-and-drop, Scenario-based |
| Certificate Validity Period: | 1 year |
| Recommended Training: | Microsoft Learn: SC-300 Learning Path |
| Exam Registration: | Microsoft Official Registration Pearson VUE |
| Sample Questions: | Microsoft SC-300 Sample Questions |
| Exam Way: | Online proctored or onsite at Pearson VUE test centers |
| Pre Condition: | No mandatory prerequisites; recommended experience with Microsoft Entra ID, identity management, and access security |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/sc-300 |
For more information about the Microsoft SC-300 Exam visit the following reference link:
Microsoft SC-300 Exam's Reference link
Microsoft SC-300 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Implement an Identity Management Solution (25-30%) | |
| Implement initial configuration of Azure Active Directory | - configure and manage Azure Active Directory roles - configure and manage custom domains - configure and manage device registration options - configure delegation by using administrative units - configure tenant-wide settings |
| Create, configure and manage identities | - create, configure and manage users - create, configure and manage groups - manage licenses |
| Implement and manage external identities | - manage external collaboration settings in Azure Active Directory - invite external users (individually or in bulk) - manage external user accounts in Azure Active Directory - configure identity providers (social and SAML/WS-fed) |
| Implement and manage hybrid identity | - implement and manage Azure Active Directory Connect (AADC) - implement and manage Azure AD Connect cloud sync - implement and manage Password Hash Synchronization (PHS) - implement and manage Pass-Through Authentication (PTA) - implement and manage seamless Single Sign-On (SSO) - implement and manage Federation (excluding manual ADFS deployments) - implement and manage Azure Active Directory Connect Health - troubleshoot synchronization errors |
Implement an Authentication and Access Management Solution (25-30%) | |
| Plan and implement Azure Multifactor Authentication (MFA) | - plan Azure MFA deployment (excluding MFA Server) - implement and manage Azure MFA settings - manage MFA settings for users |
| Manage user authentication | - administer authentication methods (FIDO2 / Passwordless) - implement an authentication solution based on Windows Hello for Business - configure and deploy self-service password reset - deploy and manage password protection - configure smart lockout thresholds - implement and manage tenant restrictions |
| Plan, implement and administer conditional access | - plan and implement security defaults - plan conditional access policies - implement conditional access policy controls and assignments (targeting, applications, and conditions) - testing and troubleshooting conditional access policies - implement application controls - implement session management |
| Manage Azure AD Identity Protection | - implement and manage a user risk policy - implement and manage sign-in risk policy - implement and manage MFA registration policy - monitor, investigate and remediate elevated risky users |
Implement Access Management for Apps (10-15%) | |
| Plan, implement, and monitor the integration of Enterprise Apps for SSO | - implement and configure consent settings - discover apps by using Microsoft Defender for Cloud Apps or ADFS application activity report - design and implement access management for apps - design and implement app management roles - monitor and audit access / Sign-ins to Azure Active Directory integrated enterprise applications - integrate on-premises apps by using Azure AD application proxy - integrate custom SaaS apps for SSO - configure pre-integrated (gallery) SaaS apps - implement application user provisioning |
| Implement app registrations | - plan your line of business application registration strategy - implement application registrations - configure application permissions - implement application authorization - plan and configure multi-tier application permissions |
Plan and Implement an Identity Governance Strategy (25-30%) | |
| Plan and implement entitlement management | - define catalogs - define access packages - plan, implement and manage entitlements - implement and manage terms of use - manage the lifecycle of external users in Azure AD Identity Governance settings |
| Plan, implement and manage access reviews | - plan for access reviews - create access reviews for groups and apps - monitor access review findings - manage licenses for access reviews - automate access review management tasks - configure recurring access reviews |
| Plan and implement privileged access | - define a privileged access strategy for administrative users (resources, roles, approvals, thresholds) - configure Privileged Identity Management for Azure AD roles - configure Privileged Identity Management for Azure resources - assign roles - manage PIM requests - analyze PIM audit history and reports - create and manage break-glass accounts |
| Monitor and maintain Azure Active Directory | - analyze and investigate sign-in logs to troubleshoot access issues - review and monitor Azure AD audit logs - enable and integrate Azure AD diagnostic logs with Log Analytics / Microsoft Sentinel - export sign-in and audit logs to a third-party SIEM - review Azure AD activity by using Log Analytics / Microsoft Sentinel, excluding KQL use - analyze Azure Active Directory workbooks / reporting - configure notifications |
Reference: https://docs.microsoft.com/en-us/learn/certifications/exams/sc-300
By Greg
