Microsoft · Associate
Microsoft Identity and Access Administrator Associate (SC-300)
Design, implement and operate identity and access management with Microsoft Entra: user and hybrid identities, authentication, Conditional Access, workload identities and identity governance.
Current exam version: The English exam is updated on October 28, 2026; Microsoft lists minor changes to user authentication, Global Secure Access and privileged access.Source: learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/sc-300, fetched 2026-10-23
SC-300 exam at a glance
| Exam code | SC-300 |
|---|---|
| Vendor | Microsoft |
| Level | Associate |
| Domains | 4 |
| Published practice questions | 64 |
| Our mock exam | 50 questions in 100 minutes |
| Our practice pass target | 70% |
| Checked against the exam guide | October 23, 2026 |
| Official exam page | Microsoft — SC-300 |
The mock exam length, time limit and pass target are our practice settings, not official exam scores or a guarantee of passing. Check the official SC-300 exam page for the current format, price and scoring before you book.
SC-300 exam domains
Weights show our practice allocation, built from the official exam guide; official blueprints may give ranges. Each domain links to its free sample questions (with explanations) and study guide preview once they are published.
Implement and manage user identities
24%Configure the Microsoft Entra tenant, create and manage users, groups and devices, collaborate with external users and tenants, and run hybrid identity with Entra Connect and Cloud Sync.
- Built-in and custom Microsoft Entra roles, evaluating effective permissions
- Administrative units, including restricted management administrative units
- Custom domains, company branding, tenant, user, group and device settings
- Users and groups: assigned vs dynamic membership, group-based licensing
- Custom security attributes and the attribute administrator roles
- Bulk operations in the admin center and Microsoft Graph PowerShell
- Device registration, Microsoft Entra join and hybrid join
- External collaboration settings, B2B invitations, cross-tenant access settings
- Cross-tenant synchronization and external identity providers (SAML, WS-Fed)
- Entra Connect Sync vs Cloud Sync, password hash sync, pass-through authentication
- Seamless SSO, migrating from AD FS, Microsoft Entra Connect Health
Free Implement and manage user identities practice questions →Implement and manage user identities study guide →
Implement authentication and access management
28%Plan and implement authentication methods, Conditional Access, ID Protection risk policies and Global Secure Access.
- Authentication methods policy: passkeys (FIDO2), Microsoft Authenticator, certificate-based authentication, Temporary Access Pass
- Tenant-wide MFA settings, SSPR and password writeback, Microsoft Entra password protection
- Windows Hello for Business and Microsoft Entra Kerberos for hybrid identities
- Revoking sessions and disabling accounts
- Conditional Access assignments, conditions, grant and session controls, templates
- Report-only mode, the What If tool and troubleshooting sign-ins
- Continuous access evaluation, authentication context and protected actions
- User risk and sign-in risk policies in Conditional Access, MFA registration campaigns
- Investigating and remediating risky users, sign-ins and workload identities
- Global Secure Access clients, Private Access, Internet Access and the Microsoft traffic profile
Free Implement authentication and access management practice questions →Implement authentication and access management study guide →
Plan and implement workload identities
24%Choose and use managed identities and service principals, integrate enterprise and on-premises apps, register applications, and govern app access with Defender for Cloud Apps.
- Managed identities (system- and user-assigned) vs service principals, user accounts and managed service accounts
- Using a managed identity to reach other Azure resources with Azure RBAC
- Enterprise application settings, app roles, assignment and application collections
- User and admin consent settings and the admin consent workflow
- Microsoft Entra application proxy and connector groups for on-premises apps
- SaaS app SSO (SAML, OIDC) and provisioning
- App registrations: supported account types, redirect URIs, secrets vs certificates
- API permissions: delegated vs application, admin consent, app roles
- Defender for Cloud Apps: Cloud Discovery, connected apps, Conditional Access app control
- Access and session policies, OAuth app policies, the cloud app catalog
Free Plan and implement workload identities practice questions →Plan and implement workload identities study guide →
Plan and automate identity governance
24%Run entitlement management, access reviews and Privileged Identity Management, and monitor identity activity through logs, workbooks and Identity Secure Score.
- Entitlement management: catalogs, access packages, policies and access requests
- Connected organizations and the external user lifecycle
- Terms of use enforced through Conditional Access
- Access reviews: scope, reviewers, recurrence, auto-apply and decisions
- PIM for Microsoft Entra roles, Azure resources and groups
- PIM role settings: activation duration, MFA or authentication context, approval, justification
- PIM audit history and reports
- Emergency access (break-glass) accounts
- Sign-in, audit and provisioning logs; log retention by license
- Diagnostic settings to Log Analytics, storage and Event Hubs; KQL queries
- Workbooks, reports and Identity Secure Score
Free Plan and automate identity governance practice questions →Plan and automate identity governance study guide →
SC-300 FAQ
How is the Identity and Access Administrator Associate (SC-300) practice assessment configured?
Our practice format targets 50 questions in 100 minutes. Availability depends on the published question bank and is shown on this course page. Official exam question counts and formats may differ.
What does the 70% practice target mean?
Microsoft technical exams use a scaled passing score of 700; this is not equivalent to 70% correct. DataCertPrep uses 70% as an internal practice target, not a prediction or guarantee of passing.
How should I assess my progress in Identity and Access Administrator Associate (SC-300)?
Use practice accuracy to find weak topics. Repeating familiar questions can inflate your score. Check coverage of the current objectives, practise hands-on tasks, and assess yourself on unseen questions.
What is the best way to study Identity and Access Administrator Associate (SC-300)?
Read the available guides, work through practice explanations, use flashcards and complete practical exercises. Take a timed assessment when available. Check the provider's current exam guide before booking your exam.
Should I use SC-300 exam dumps?
No. "Dumps" are questions copied or recalled from the live exam. Certification exams are covered by a candidate agreement that prohibits sharing or using them, and breaking it can lead to a revoked certification or a ban from future exams. Dumps are also often wrong, and they go out of date when the exam blueprint changes. Memorising answers does not build the skills the exam tests. Study the official Microsoft exam guide and practise with original questions that explain each answer, such as the free sample questions linked on this page.