Free study guide

Microsoft SC-300 Study Guide

Microsoft Identity and Access Administrator SC-300

Microsoft Identity and Access Administrator (SC-300) is the associate exam for people who design, implement and operate identity and access management with Microsoft Entra. It covers user and hybrid identities, authentication and Conditional Access, workload identities, and identity governance. It suits administrators who already know Azure, Microsoft 365 and Active Directory.

  • Exam code SC-300
  • Associate level
  • 4 exam domains

This guide is free, with no sign-up. It explains every Microsoft SC-300 exam topic in plain English, one chapter at a time. Read them in order or jump straight to the topic you need.

  • 4chapters
  • 18topics
  • 7diagrams and exhibits
  • 1 h 41 minfast track
Start with Implement and Manage User Identities
  • Every topic follows the same simple pattern: what it is, how it works, common mistakes
  • Diagrams and real command output where a picture explains it best
  • Exam tips and worked subnetting and IPv6 practice, with answers

How the exam is weighted

Each domain is worth roughly this share of the exam. The exam provider publishes a range for each domain, so the bar marks the middle of it. Spend your study time in proportion, and select a domain to open its chapter.

Chapters

Open a chapter to see its topics and how long each takes.

1Implement and Manage User Identities4 topics · 24 min fast trackTenant setup, roles and administrative units, users, groups and devices, external identities and hybrid identity.
  1. 1Entra Tenant, Roles and Administrative Units6 min
  2. 2Users, Groups, Devices and Licences6 min
  3. 3External Identities and Cross Tenant Access6 min
  4. 4Hybrid Identity with Connect Sync and Cloud Sync6 min
Read the chapter overview →
2Implement Authentication and Access Management6 topics · 32 min fast trackMethods, MFA and SSPR, Conditional Access, ID Protection risk policies and Global Secure Access.
  1. 1Authentication Methods, MFA and SSPR6 min
  2. 2Password Protection, Windows Hello and Hybrid Authentication5 min
  3. 3Conditional Access Policies6 min
  4. 4Conditional Access Session Controls and Protected Actions5 min
  5. 5Identity Protection and Risk5 min
  6. 6Global Secure Access5 min
Read the chapter overview →
3Plan and Implement Workload Identities4 topics · 23 min fast trackManaged identities and service principals, enterprise apps, app registrations and Defender for Cloud Apps.
  1. 1Managed Identities and Service Principals6 min
  2. 2Enterprise Applications and Application Proxy6 min
  3. 3App Registrations and Permissions6 min
  4. 4Defender for Cloud Apps and App Governance5 min
Read the chapter overview →
4Plan and Automate Identity Governance4 topics · 22 min fast trackEntitlement management, access reviews, Privileged Identity Management, emergency access and monitoring.
  1. 1Entitlement Management6 min
  2. 2Access Reviews5 min
  3. 3Privileged Identity Management6 min
  4. 4Monitoring with Logs, Workbooks and Identity Secure Score5 min
Read the chapter overview →

Ready for more practice?

The full Microsoft SC-300 question bank has 650 questions, with timed practice exams and an explanation for every answer.

SubscribeTry Sample Exam

This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.