Exam SC-300: Microsoft Identity and Access Administrator
Proctored certification exam that may include interactive components.
- Type
- Written
- Duration
- 100 min
Exam sections
Implement and manage user identities
This section focuses on configuring Microsoft Entra tenants, managing built-in and custom roles, and utilizing administrative units. It covers the creation and management of user and group identities, external collaboration settings, and the implementation of hybrid identity solutions like Entra Connect and Cloud Sync.
Preparation tips
Master Microsoft Entra role evaluation and hybrid identity sync options like Password Hash Sync and Pass-through Authentication.
Implement authentication and access management
This section covers planning and implementing user authentication methods, including MFA, SSPR, and certificate-based authentication. It emphasizes Microsoft Entra Conditional Access policies, session management, and risk mitigation using ID Protection to monitor and remediate risky user behaviors and workload identities.
Preparation tips
Focus on Conditional Access policy logic, session controls, and the configuration of Microsoft Entra ID Protection risk policies.
Plan and implement workload identities
This section addresses identities for applications and Azure workloads, focusing on managed identities and service principals. It includes the integration of enterprise applications, management of app registrations, and monitoring application access using Microsoft Defender for Cloud Apps through access and session policies.
Preparation tips
Study the differences between user-assigned and system-assigned managed identities and how to configure API permissions for app registrations.
Plan and automate identity governance
This section focuses on entitlement management, including catalogs and access packages, and the implementation of access reviews. It covers privileged access management using PIM for roles and groups, as well as monitoring identity activity through logs, workbooks, and KQL queries in Log Analytics.
Preparation tips
Review the lifecycle of access packages and the request/approval workflow in Privileged Identity Management (PIM).
