Part 1 of the SC-300 Microsoft Identity and Access Administrator series
Identity is now the front door to almost everything a company runs, and the people who protect it are in demand. If you want to prove those skills, the SC-300 exam is the way to do it. It leads to the Microsoft Certified: Identity and Access Administrator Associate certification, and it focuses on Microsoft Entra ID (formerly Azure Active Directory).
This is the first post in a complete series that covers every SC-300 topic with a blog, a video and a hands-on demo. In this post you will learn what the exam covers, how it is structured, and how to prepare for it in 8 weeks using free resources.
SC-300 Exam Guide: Skills Measured, Study Plan and Free Resources
Quick Summary
- SC-300 validates your ability to implement and manage identity and access with Microsoft Entra ID
- The exam covers four areas: identities, authentication and access, workload identities, and identity governance
- You do not need to be an expert first. Basic knowledge of Microsoft 365 and Azure helps, and hands-on practice matters more than reading
- An 8-week plan with 6 to 8 hours per week is realistic for most people
- Almost everything you need to study is free
Who Is SC-300 For?
SC-300 suits anyone who works with, or wants to work with, identity and access in Microsoft cloud environments:
- IT administrators and help desk staff moving into security or identity
- Microsoft 365 and Azure administrators
- Security engineers and analysts who need to understand identity controls
- Consultants who deploy Entra ID, Conditional Access or hybrid identity
- Students and career changers building a cloud security path
There is no formal prerequisite. Microsoft’s study guide says you should be familiar with Azure, Microsoft 365 services and workloads, and Active Directory Domain Services (AD DS), as well as PowerShell and Kusto Query Language (KQL). If any of those are new to you, this series introduces them as we go.
What the SC-300 Exam Covers
The exam is split into four skill areas, each with a percentage weight. The weights below come from Microsoft’s official study guide, which lists the skills measured as of October 28, 2026. Microsoft treats them as approximate and updates them from time to time, so check the current version of the study guide before you plan your time.
| Skill area | Weight | What it includes |
|---|---|---|
| Implement and manage user identities | 20-25% | Entra roles and administrative units, domains and branding, tenant settings, users, groups, licenses, device join, external users, cross-tenant sync, and hybrid identity (Connect Sync, Cloud Sync, password hash sync, pass-through authentication, Seamless SSO, AD FS migration, Connect Health) |
| Implement authentication and access management | 25-30% | Authentication methods (passkeys, Authenticator, Temporary Access Pass, certificate-based), MFA, SSPR, Windows Hello for Business, password protection, Conditional Access, continuous access evaluation, Identity Protection, and Global Secure Access |
| Plan and implement workload identities | 20-25% | Managed identities, service principals, enterprise applications, Application Proxy, user and admin consent, app registrations, API permissions, app roles, and app access with Microsoft Defender for Cloud Apps |
| Plan and automate identity governance | 20-25% | Entitlement management, access reviews, Privileged Identity Management, emergency access accounts, sign-in and audit logs, diagnostic settings, KQL, workbooks and Identity Secure Score |
A note on the authentication weight: the study guide’s summary list shows 25-30%, but the heading of that section on the same page shows 20-25%. Check the live page for the number that applies on your exam date.
Authentication carries the most weight, and the other three areas are roughly equal, so no area is small enough to skip. Plan your hands-on time around the large topics inside each area: Conditional Access, hybrid identity, enterprise applications and app registrations, and Privileged Identity Management.
Exam update: Microsoft says its study guide includes two versions of the skills measured, depending on when you take the exam. The version I used applies from October 28, 2026, and its change log lists only minor changes to user authentication, Global Secure Access and privileged access. If you sit the exam before that date, check the earlier version on the same page too.
SC-300 Exam Format at a Glance
- Question types: expect a mix of formats, such as multiple choice, drag and drop, hot area and case studies. Try them in the free exam sandbox before exam day.
- Passing score: 700 or greater on a scale of 1000
- Scheduling and delivery: use the Schedule Exam section of the SC-300 exam page to see test center and online options
- Cost, time limit and number of questions: these vary by country and can change, so read them on the exam page instead of relying on a blog
- Language: the English exam is updated first, and localized versions follow about eight weeks later. If the exam is not offered in your language, you can request an extra 30 minutes
- Features tested: most questions cover generally available features, and the exam may include Preview features if they are commonly used
- Accommodations: if you need assistive devices or extra time, request accommodations
- Renewal: associate certifications expire annually, and you renew by passing a free online assessment on Microsoft Learn, so you do not have to retake the exam
Your 8-Week Study Plan
This plan follows the order of the series. Spend about 6 to 8 hours each week: roughly half on reading and videos, half on hands-on labs. Workload identities and governance are each worth 20-25% of the exam, so they get real time in weeks 6 to 8.
| Week | Focus | What to do |
|---|---|---|
| 1 | Foundations and lab | Build your lab tenant, learn Entra ID licensing, understand OAuth, OIDC and SAML basics |
| 2 | Tenant, users, groups and devices | Practice custom domains, roles, administrative units, dynamic groups, licensing and device join |
| 3 | External and hybrid identity | Configure B2B, cross-tenant settings, Entra Connect, Cloud Sync, password hash sync |
| 4 | Authentication methods | Set up MFA, passkeys, Microsoft Authenticator, SSPR, Windows Hello for Business and password protection |
| 5 | Conditional Access, Identity Protection and Global Secure Access | Build and test policies, use report-only mode, practice risk policies, explore Global Secure Access |
| 6 | Workload identities | Use managed identities, enterprise apps, app registrations, consent, Application Proxy and app roles |
| 7 | Cloud app security and entitlement management | Work through Defender for Cloud Apps, access packages and access reviews |
| 8 | PIM, monitoring and revision | Configure PIM, read sign-in and audit logs, write KQL queries, then take practice assessments and redo weak labs |
If you already work with Entra ID every day, you can compress this to 4 weeks. If Entra ID, Azure or Active Directory are new to you, or you only have a few hours a week, stretch it to 10 to 12 weeks, because the last three weeks are heavy.
Free Resources You Should Use
Everything below is free. Most links come from Microsoft’s official SC-300 study guide, and I note the ones that do not. Microsoft moves pages from time to time, so open each link once before you rely on it.
Exam and certification
| Resource | Use it for |
|---|---|
| Official SC-300 study guide | The full list of skills measured, with weights and the change log. Start here |
| SC-300 exam page | Training options, scheduling, price and time limit for your country |
| Free practice assessment | Practice questions with explanations. Take it at the start and the end |
| Exam sandbox | Try the exam interface and question types |
| Exam scoring and score reports | How scoring works and how to read your report |
| Certification renewal | The free yearly renewal assessment |
| Request accommodations | Extra time or assistive devices |
| Your Microsoft Learn profile | Schedule and renew exams, and share your certificate |
Free learning, videos and community
| Resource | Use it for |
|---|---|
| Microsoft Learn training for SC-300 | Self-paced learning paths and modules, or an instructor-led course |
| Exam Readiness Zone videos | Microsoft’s own exam prep videos for SC-300 |
| Microsoft Learn shows | More free videos from Microsoft |
| Microsoft Q&A | Ask technical questions and search existing answers |
| Security, compliance and identity community hub | Community discussions and announcements |
| Microsoft Learn on Tech Community | News about Microsoft Learn and certifications |
Documentation by skill area
| Skill area | Documentation |
|---|---|
| General Microsoft Entra | Microsoft Entra ID documentation |
| User identities and external users | External Identities documentation |
| Authentication and access | Multifactor authentication overview and identity management best practices |
| Workload identities | Microsoft Defender for Cloud documentation (listed in the study guide), and search Microsoft Learn for Defender for Cloud Apps, which the exam also covers |
| Identity governance | What is Microsoft Entra ID Governance? |
| Privileged access | What is Privileged Identity Management? |
| Monitoring | Microsoft Entra monitoring and health |
| Wider security context | Microsoft security documentation |
Some of these links may redirect to Microsoft’s newer Entra documentation, which is fine.
Lab and tools (not from the study guide)
| Resource | Use it for |
|---|---|
| Azure free account | A free Azure subscription, and a free Microsoft Entra tenant to practice in |
| Microsoft Entra admin center | The portal used in all the demos |
| Microsoft Graph PowerShell documentation | The study guide expects PowerShell familiarity |
| Kusto Query Language documentation | The study guide expects KQL familiarity |
| jwt.ms | Decode tokens when you learn OAuth and OpenID Connect |
| Microsoft 365 Developer Program | Free sandbox, but it is limited to eligible members, mainly Visual Studio Professional or Enterprise subscribers and some partners |
If you do not qualify for the Microsoft 365 developer sandbox, start with the Azure free account and its free Entra tenant, and use a Microsoft 365 trial tenant for features that need Microsoft 365 licenses. Some features need Entra ID P1, P2 or Governance licenses, so check the licenses page in the Entra admin center for current trial options. The next post in this series walks through the lab setup step by step.
How to Study Effectively
- Do every demo yourself. Watching a video once is not enough. Click through each setting in your lab and break things on purpose.
- Learn the why, not just the click path. Exam questions give scenarios, so you need to choose between options such as password hash sync and pass-through authentication.
- Know the licensing. Many questions hinge on whether a feature needs Entra ID P1, P2 or Governance.
- Make notes in your own words. Short notes per topic make the final week of revision much faster.
- Practice with case studies. They are long, so practice scanning for requirements and constraints first.
- Book your exam early. A date on the calendar keeps you on track.
Common Mistakes to Avoid
- Memorizing menu paths without understanding the concepts. The portal changes, the concepts do not.
- Ignoring hybrid identity because it looks old. It is a large part of the exam and of real-world work.
- Skipping Conditional Access labs. Reading about it is not the same as troubleshooting a blocked sign-in.
- Leaving governance (PIM, access reviews, entitlement management) until the last day. It is 20-25% of the exam.
- Taking practice tests only to check the score instead of reading every explanation.
What Happens Next in This Series
This series follows the exam objectives in order, so you can go from first login to exam day. Up next is Episode 0.2, where we build a free lab with a Microsoft 365 developer or trial tenant and Azure, which you will use for every demo that follows.
Your next steps:
- Download the official SC-300 study guide and read through the skills measured
- Pick your exam date and choose a 4, 8 or 12-week plan
- Take the free Microsoft Learn practice assessment to see where you stand
- Follow the series, starting with the lab setup post
Have a question about the exam or the study plan? Leave a comment below and I will answer it in a future video.
Explore more on Byqus Tutorials and Entra ID / Identity Section.
