SC-200 exam voucher — at a glance
A prepaid exam voucher listed for Exam SC-200: Microsoft Security Operations Analyst, the exam for Microsoft Certified: Security Operations Analyst Associate. You choose the country or region where you will take the exam, and the price for that country or region is shown at the top of this page. Your voucher code is emailed within 24–48 hours of your order being processed, and you use it when you schedule the exam with Pearson VUE.
The batch expiry above is the date the vouchers currently on sale expire. It is not an exam date, an exam update or retirement date, or the expiry of a certification. Schedule your exam before the voucher expires, and check the date in your voucher email.
What you get
Included
- One exam voucher listed for Exam SC-200: Microsoft Security Operations Analyst, for the country or region you choose
- Your voucher code by email within 24–48 hours of your order being processed
- Instructions for entering the code when you schedule your exam with Pearson VUE
What this voucher is not
- It is not a booking. You choose your own exam date, time and delivery method when you schedule.
- It covers one exam attempt. It is not a retake package, and a resit needs a new voucher.
- It does not include training, study materials or practice exams.
- It is not a guarantee of a pass. The voucher pays for the exam attempt; the result depends on your preparation.
- It is not for a different country or region. It is for the country or region you choose at checkout.
SC-200 exam details
Exam SC-200: Microsoft Security Operations Analyst
What the exam covers
Microsoft lists these skill areas and task groups for SC-200:
- Manage a security operations environment (40–45%) — Configure automation for Microsoft Defender XDR and Microsoft Sentinel; Configure the Microsoft Sentinel SIEM and platform; Ingest data into the Microsoft Sentinel SIEM and platform; Configure detections
- Respond to security incidents (35–40%) — Respond to alerts and incidents in Microsoft Defender XDR; Respond to alerts and incidents in Microsoft Defender for Endpoint; Investigate Microsoft 365 activities to identify threats
- Perform threat hunting (20–25%) — Detect threats by using Microsoft Defender XDR; Detect threats by using the Microsoft Sentinel platform
Exam update. Microsoft states that the English language version of this exam will be updated on October 21, 2026. The skills listed here are Microsoft’s skills measured as of that date; until then the English exam follows the previous version, which Microsoft compares in the study guide’s change log. Localized versions are usually updated about eight weeks after the English version.
Full published details are in Microsoft’s SC-200 study guide and on Microsoft Learn.
Who this voucher is for
- Preparing to sit SC-200 and ready to book it
- Investigating and responding to threats with Microsoft security tools
- Working towards Microsoft Certified: Security Operations Analyst Associate
- Buying now to use before the voucher’s expiry date
Who Microsoft says this exam is for
As a candidate for this exam, you’re a security operations analyst who reduces organizational risk by performing triage, responding to incidents, hunting for threats, and engineering detections.
As a security operations analyst, you monitor, identify, investigate, and respond to threats in multi-cloud and on-premises environments by using Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Purview, and Microsoft Defender for Cloud workload protections. You perform hunting by using KQL and automate responses to threats.
You collaborate with business and security leadership to define security standards for the organization. You work with other roles across the digital enterprise to implement the standards, to enhance the security posture of an organization, and to raise security awareness.
As a candidate, you should be familiar with:
- Microsoft security, compliance, and identity solutions
- Microsoft 365
- Azure cloud services
- AI agents and Copilots
- Windows, Linux, and mobile operating systems.
Choose your country or region
Microsoft prices its exams by the country or region where the exam is proctored, and its prices do not include applicable taxes. This voucher is sold the same way: choose the country or region where you will take the exam, and the price for that country or region is shown before you add it to your cart.
- Pick the country you will test in. The voucher is for the country or region you select at checkout. Schedule your exam in that same country or region.
- Price in US dollars. The price for each country or region is shown in US dollars at the top of this page and is the amount charged at checkout.
- Your country is not listed? Contact us before ordering.
Microsoft’s own exam price for your location is shown on the SC-200 page on Microsoft Learn when you choose a country or region.
Microsoft exam rules to know before you buy
These rules are set by Microsoft and apply to the exam whichever way you pay for it.
- Retakes. Microsoft requires a 24-hour wait after a first failed attempt and a 14-day wait between later attempts, with no more than five attempts in 12 months from the first attempt. A retake is paid for separately (retake policy).
- Rescheduling. Microsoft states that you must reschedule or cancel at least 24 hours before your appointment, or your fee will be forfeited (reschedule policy).
- Scoring. Scores are reported on a scale of 1 to 1,000, and a passing score is 700 or greater. Microsoft notes this is a scaled score, which may not equal 70% of the points (exam scoring).
- Renewal. Microsoft associate, expert and specialty certifications expire annually. You renew for free by passing an unproctored online assessment on Microsoft Learn before the certification expires (renewal).
- Microsoft Learn during the exam. Microsoft lets you open Microsoft Learn during associate and expert exams. No extra time is added.
How it works
- Choose your country or region and check the exam — this voucher is listed for Exam SC-200: Microsoft Security Operations Analyst.
- Complete checkout at the price shown for your country or region.
- Receive your voucher code by email. Your order is fulfilled by EvolveSkill and your code is emailed within 24–48 hours of your order being processed.
- Schedule your exam. Start from the exam’s Microsoft Learn page, continue to Pearson VUE, choose a test centre or online exam, and on the payment screen select “Add Voucher or Promo Code” to enter your code (Microsoft’s instructions).
Before you buy
- Confirm the exam. This voucher is listed for Exam SC-200: Microsoft Security Operations Analyst.
- Choose the right country or region. The voucher is for the country or region you select; schedule the exam there.
- Check the language. Microsoft lists SC-200 in English, Japanese, Chinese (Simplified), Korean, French, German, Spanish, Portuguese (Brazil), Chinese (Traditional), Italian.
- Check the exam version. Microsoft is updating the English version of SC-200; see the exam update note above and the study guide.
- Check the expiry date. The batch on sale now expires January 1, 2027, shown above. Schedule your exam before then.
- One attempt. The voucher covers one attempt. If you need a retake, Microsoft’s retake waiting periods apply and a resit needs a new voucher.
- Cancelling your order. Once a voucher has been issued or delivered it cannot be returned or refunded. If your order has not yet been processed and the voucher has not been issued, contact us — a cancellation may still be possible. See our Refund & Cancellation Policy.
Frequently asked questions
What is the SC-200 exam voucher?
A prepaid exam voucher listed for Exam SC-200: Microsoft Security Operations Analyst. You enter the voucher code as payment when you schedule the exam with Pearson VUE.
Which certification does SC-200 count towards?
SC-200 is the exam for Microsoft Certified: Security Operations Analyst Associate.
How much does the SC-200 exam cost?
Microsoft prices exams by the country or region in which the exam is proctored, and its prices do not include applicable taxes. Microsoft shows the price for your location on the exam’s Microsoft Learn page.
How much does this voucher cost?
It depends on the country or region you choose. The price in US dollars is shown at the top of this page once you choose, and it is the amount charged at checkout.
Why do I need to choose a country or region?
Microsoft prices exams by the country or region where the exam is proctored, and this voucher is sold the same way. Choose the country or region where you will take the exam and schedule the exam there.
How long is the voucher valid?
The batch on sale now expires January 1, 2027. That is the voucher’s expiry, not an exam date, an exam retirement date or a certification renewal date. Schedule your exam before then.
How fast will I get my voucher?
Your voucher is fulfilled by EvolveSkill and emailed within 24–48 hours after your order is processed, along with instructions for using it.
How do I use the voucher?
Start scheduling from the exam’s Microsoft Learn page and continue to Pearson VUE. On the payment and billing screen, select “Add Voucher or Promo Code” and enter your code.
Can I take the SC-200 exam online?
Microsoft delivers online exams with Pearson VUE, monitored by a proctor through webcam and microphone. Online exams are available in most, but not all, countries and regions, so check availability when you schedule. You can also choose a Pearson VUE test centre.
How long is the SC-200 exam?
Microsoft lists 100 minutes for SC-200.
How many questions are on the SC-200 exam?
Microsoft does not publish a fixed number for SC-200. It states that most certification exams contain between 40 and 60 questions and that the number can vary by exam.
What is the passing score for SC-200?
A score of 700 or greater, on a scale of 1 to 1,000. Microsoft notes this is a scaled score, which may not equal 70% of the points.
What does the SC-200 exam cover?
Microsoft lists these skill areas: Manage a security operations environment (40–45%); Respond to security incidents (35–40%); Perform threat hunting (20–25%).
Which skill area carries the most weight?
Manage a security operations environment, at 40–45% of the exam, according to Microsoft’s study guide.
Which languages is SC-200 available in?
Microsoft lists English, Japanese, Chinese (Simplified), Korean, French, German, Spanish, Portuguese (Brazil), Chinese (Traditional), Italian. If the exam is not available in your preferred language, Microsoft lets you request an additional 30 minutes.
Does this cover a retake?
No. The voucher covers one exam attempt. Microsoft requires a 24-hour wait after a first failed attempt and 14 days between later attempts, with no more than five attempts in 12 months.
Can I reschedule or cancel my exam appointment?
Yes, through your Microsoft Learn profile. Microsoft states that you must reschedule or cancel at least 24 hours before the appointment, or your fee will be forfeited.
How long is the certification valid?
Microsoft associate, expert and specialty certifications expire annually. You can renew for free by passing an online assessment on Microsoft Learn before the certification expires.
Is the SC-200 exam changing?
Microsoft states that the English language version will be updated on October 21, 2026. The skills on this page are Microsoft’s skills measured as of that date; the study guide’s change log lists what changes.
Does Microsoft offer other ways to pay less for an exam?
Yes. Microsoft offers academic pricing on certification exams in most countries and regions (except India and China) to students who verify their academic status in their certification profile. Through Pearson VUE it also sells Exam Replay: one exam voucher plus one retake of the same exam, both scheduled and taken within 12 months of purchase. Compare these with the price shown here before you buy.
Does it include study materials or practice tests?
No. This product is the exam voucher only — no training course, study guide or practice exam. Microsoft publishes a free study guide for SC-200 and free practice assessments for many exams.
Does buying a voucher guarantee that I will pass?
No. The voucher pays for the exam attempt only. Passing depends on your own preparation.
What is EvolveSkill?
EvolveSkill is an independent company that sells certification exam vouchers and publishes certification guides. Microsoft sets the exam content, scoring and policies.
Who owns the Microsoft names and marks?
Microsoft, Azure, Microsoft 365, Dynamics 365, Power Platform and related names are trademarks of Microsoft Corporation. Exam names are used on this page to identify the exam this voucher is listed for.
Ready to buy?
Choose your country or region and check the exam, then add the voucher to your cart.
Planning your next Microsoft exam? Browse all Microsoft exam vouchers, including SC-300 – Microsoft Identity and Access Administrator, SC-500 – Implementing End-to-End Security Controls for Cloud and AI Workloads and SC-100 – Microsoft Cybersecurity Architect.
