SC-200: Security Operations Analyst - EN

Last Updated 27 Sep 2025

Course Overview

Investigate, search for, and mitigate threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender.

Duration - 10 Hours

Level - Intermediate

Style - Self paced

Course Type - Credential Ready

Certification - Yes

Hands on Labs - No

Solution Areas - Security, Modern SecOps with Unified Platform

Featured Product - Microsoft Security Copilot

Course Modules

Welcome to Cert Prep

In this introductory module, we will walk you through the key information you need to know before starting your certification prep course. You'll gain a clear understanding of the steps, expectations, and benefits

Mitigate Threats Using Microsoft Defender XDR

In this module, learners will learn to investigate and respond to security incidents by using Microsoft Defender XDR and Microsoft Defender solutions, including Microsoft Defender for Office 365, Microsoft Entra ID Identity Protection, Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps through lectures

Configure Microsoft Sentinel in a Security Operations Environment

In this module, learners will learn to deploy and configure Microsoft Sentinel, connect data sources, configure analytics rules, and automate security operations by using Microsoft Sentinel SIEM and SOAR capabilities.

Respond to Security Incidents by Using Microsoft Sentinel

In this module, learners will learn to investigate security incidents, perform threat hunting by using KQL and Microsoft Defender XDR, manage Microsoft Sentinel incidents, and use Microsoft Security Copilot for investigation and response.

Respond to Alerts and Incidents in Microsoft Defender for Endpoint

In this module, learners will learn to investigate and remediate threats across Microsoft Defender for Endpoint, Defender for Office 365, Defender for Cloud, Defender for Cloud Apps, Microsoft Entra ID, Microsoft Defender for Identity, and Microsoft Purview.

Getting Ready for the Certification: SC-200: Security Operations Analyst

In this exam preparation module, learn effective preparation strategies for the certification exam, including sample questions and study tips.

Practice Test

Take this assessment to validate your skills gathered from the self-paced online learning course completed in this course to mark your completion.

Live Support, Next Steps and Feedback

If you have further questions or need support, don’t forget to join our scheduled Office Hours for expert guidance.

Other courses in this Category

Intermediate

AZ-500: Azure Security Engineer - EN

Duration - 10 Hours
Course
Intermediate

SC-300: Identity and Access Administrator - EN

Duration - 10 Hours
Course
Advanced

SC-100: Cybersecurity Architect Expert - EN

Duration - 10 Hours
Course
Intermediate

SC-200: Security Operations Analyst - EN

Duration - 10 Hours
Course