<24 hrs

median time from a vulnerability being found in the wild to being weaponised. Critical external fixes can take 30 to 60 days. Microsoft Digital Defense Report 2026.

Microsoft Certified: Cybersecurity Architect Expert (SC-100) certification

One Gap Is All They Need.

Attackers weaponise new vulnerabilities in under a day, while critical fixes can take a month or more. SC-100 proves you can design security that holds across identity, cloud, data and AI, so one gap does not become a breach.

HRD Corp claimableYayasan Peneraju: may be eligibleKL, Penang or online

Exam

SC-100

Course

4 days

Course fee

RM3,000

With exam

RM3,374

Next intake

5 Jan 2027

Quick answer

What is Microsoft Certified: Cybersecurity Architect Expert?

Microsoft Certified: Cybersecurity Architect Expert is Microsoft’s senior security credential. It shows you can turn a security strategy into Zero Trust designs across identity, devices, data, AI, applications, networks and security operations. You need one qualifying associate certification plus a pass in exam SC-100.

Exam facts verified against learn.microsoft.com on 23 Oct 2026

FOR

Experienced security engineers and analysts moving into architecture

ROLES

Cybersecurity architect, security solutions architect, cloud security lead

SKIP IF

You hold no Microsoft security associate certification yet. Start with SC-200, SC-300 or SC-500

01

The Credential

What you study, practise and sit to earn it.

Hold one qualifying associate certification (SC-200, SC-300 or SC-500), pass exam SC-100, and you earn Microsoft Certified: Cybersecurity Architect Expert.

COURSE

4 days, SC-100T00

FOCUS

Zero Trust security design

EXAM

SC-100, 100 min

CREDENTIAL

Microsoft Certified Expert

Awarded by

Microsoft

Level

Expert

Prerequisite

One of SC-200, SC-300 or SC-500 associate certifications

Frameworks

Zero Trust, MCRA, MCSB, Cloud Adoption Framework

Validity

12 months, renew free online

Covers

Identity, SecOps, infrastructure, apps, data and AI

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Design security across the whole Microsoft estate

→

SC-100

Microsoft’s expert-level security architecture credential

Lead security across any vendor

→

ISC2 CISSP

Senior, vendor-neutral credential across eight domains

Run the security programme

→

PECB CISO or ISACA CISM

Leadership, governance and risk rather than design

Stay hands-on as an engineer

→

Cloud and AI Engineer

Secure Azure, data and AI workloads end to end

SC-100 builds on an associate certification. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with an associate course: SC-200, SC-300 or SC-500.

03

What the Exam Covers

Skills measured for exam SC-100. Bars to scale.

4 skill areasLargest: SecOps, Identity and Compliance, and Infrastructure, 25 to 30% each

Design Security Operations, Identity and Compliance · 25–30%
Design Security Solutions for Infrastructure · 25–30%
Design Solutions Aligned with Security Best Practices · 20–25%
Design Security Solutions for Applications and Data · 20–25%

Source: Microsoft Learn SC-100 study guide. Microsoft publishes weightings as ranges; bars show the midpoint.

04

What the Course Covers

Microsoft Official Course SC-100T00, built around design scenarios.

Four days of Microsoft Official Course training. You start with Microsoft’s reference architectures and frameworks, then design security for operations and identity, infrastructure, and applications, data and AI.

Module 1

Best Practices and Frameworks

  • Ransomware resiliency strategy
  • Microsoft Cybersecurity Reference Architectures (MCRA)
  • Microsoft Cloud Security Benchmark (MCSB)
  • Cloud Adoption Framework and Well-Architected Framework
  • Zero Trust adoption framework

Module 2

SecOps, Identity and Compliance

  • Security operations design
  • Identity and access management
  • Privileged access
  • Regulatory compliance

Module 3

Applications, Data and AI

  • Securing Microsoft 365, including Microsoft 365 Copilot
  • Application security and DevSecOps
  • Data security, including data used in AI workloads
  • Agent identities with Microsoft Entra Agent ID

Module 4

Infrastructure

  • Posture management in hybrid and multicloud
  • Server and client endpoints
  • SaaS, PaaS and IaaS services
  • Network security and Security Service Edge

4

design areas, each matching a skill area in Microsoft’s SC-100 study guide, updated 21 Oct 2026.

05

Why Now

How fast attackers move, where they get in, and why train with us.

40K

CVEs published in the first half of 2026, on track to roughly double for the year

Microsoft Digital Defense Report 2026

50%

of observed initial access came through user execution (30%) or valid accounts (20%)

Microsoft Digital Defense Report 2026

1.1M+

devices ran attacker-supplied ClickFix-style commands from February to early May 2026, up roughly eightfold

Microsoft Digital Defense Report 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Meeting them takes security designed as one system, not tools bolted on one at a time.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

Microsoft Solutions Partner, Training Services

Delivering the Microsoft Official Course SC-100T00

Exam add-on

Add your exam for RM374

HRD Corp registered

This course is HRD Corp claimable

KL, Penang or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Four-day courseRM3,000

Exam add-on (SC-100)RM374

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM3,374

RM3,000 + RM374

Dates

Where

Fee

Tue 5 to Fri 8 Jan 2027

Kuala Lumpur, Penang or online

RM3,000 / RM3,374 with exam

Mon 29 Mar to Thu 1 Apr 2027

Kuala Lumpur or online

RM3,000 / RM3,374 with exam

Tue 25 to Fri 28 May 2027

Kuala Lumpur, Penang or online

RM3,000 / RM3,374 with exam

Mon 19 to Thu 22 Jul 2027

Kuala Lumpur or online

RM3,000 / RM3,374 with exam

Mon 20 to Thu 23 Sep 2027

Kuala Lumpur, Penang or online

RM3,000 / RM3,374 with exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Microsoft Certified: Cybersecurity Architect Expert

Exam

SC-100

Prerequisite

SC-200, SC-300 or SC-500 associate certification

Duration

100 minutes exam time, 120 minutes seat time

Passing score

700 or greater

Languages

English, Japanese, Chinese (Simplified and Traditional), Korean, German, French, Spanish, Portuguese (Brazil), Italian

Scheduling

Through Pearson VUE

Retakes

After 24 hours for a second attempt

Exam add-on

RM374 through Trainocate

EVERY 12 MONTHS

Renew free online

Microsoft certifications, Expert included, expire after a year. Renew at no cost by passing an online assessment on Microsoft Learn.

STAY CURRENT

Learn what changed

The renewal assessment covers the latest product updates, so your skills stay in step with Microsoft security.

FAQ

Questions People Ask

What is SC-100?

SC-100, Microsoft Cybersecurity Architect, is the exam for Microsoft Certified: Cybersecurity Architect Expert. It tests how you design security across security operations, identity, compliance, infrastructure, applications, data and AI, aligned with Zero Trust.

You need one of three associate certifications: Identity and Access Administrator (SC-300), Security Operations Analyst (SC-200) or Cloud and AI Security Engineer (SC-500), plus a pass in SC-100.

At Trainocate Malaysia the four-day SC-100T00 course is RM3,000 per person, or RM3,374 with the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

A proctored exam scheduled through Pearson VUE, with case studies among its question types. Microsoft gives role-based exams without labs 100 minutes, inside a 120-minute seat time. You need 700 or more to pass.

Microsoft made minor updates to security operations design and to evaluating Microsoft 365 security. The skill areas and weights stay the same, and the study guide now covers AI topics such as Microsoft 365 Copilot data controls and Entra Agent ID.

SC-100 proves you can design security with Microsoft technologies. CISSP is vendor-neutral and broader, covering governance and risk across eight domains. Architects in Microsoft environments often hold both.

The certification is valid for 12 months. Renew it free by passing an online assessment on Microsoft Learn.

Design Security That Holds

Pick an intake. An advisor confirms fees, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 5 to Fri 8 Jan 2027
  • RM3,000, or RM3,374 with exam

Sources

  1. Microsoft Learn: Cybersecurity Architect Expert
  2. Microsoft Learn: SC-100 study guide
  3. Microsoft Learn: Renew your Microsoft certification
  4. Microsoft Learn: Exam SC-100
  5. Microsoft Learn: Exam duration and exam experience
  6. Microsoft Security Insider: 2026 Digital Defense Report (1 Oct 2026)
  7. Microsoft: Digital Defense Report 2026
  8. Trainocate: SC-100T00 course page
  9. NACSA: Cyber Security Act 2024 (Act 854)
  10. MAICSA: Act 854 regulations summary