SC-200: Security Operations

Course overview

Learn to reduce organisational risk by detecting, investigating and responding to threats using Microsoft Defender XDR, Microsoft Defender for Cloud and Microsoft Sentinel. This program builds the operational skills of a security operations analyst, from threat mitigation to hunting and response.

Who should attend

• Security operations and SOC analysts
• IT and security professionals responsible for threat response
• Staff moving into a security operations role

What you will learn (aligned to Microsoft’s skills measured)

• Mitigate threats using Microsoft Defender XDR
• Mitigate threats using Microsoft Defender for Cloud
• Mitigate threats using Microsoft Sentinel — configure, hunt and respond

What’s included

• Microsoft-aligned learning pathway and learner guide
• Hosted labs where required — no personal Azure subscription needed
• Session recordings and an exam-readiness checklist
• Live trainer-led exam clinic and Q&A
• MILCOM TECH course completion certificate (plus a Microsoft course completion record where applicable)

Complete ILT adds full trainer-led delivery, demonstrations and a structured completion plan.

Entry requirements

Security, Microsoft 365 or Azure fundamentals recommended; SC-900 is helpful.

Certification & exam information

This program prepares you for Exam SC-200: Microsoft Security Operations Analyst, leading to Microsoft Certified: Security Operations Analyst Associate (Associate). The Microsoft exam is not included by default — add an official exam voucher at checkout, or use one you already hold. On completion you receive a MILCOM TECH course completion certificate; where applicable, you may also receive a Microsoft course completion record/certificate for the official course. These are separate from Microsoft certification and are not a nationally recognised qualification.

Related courses