Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
Microsoft · SC-200 · FREE COURSE

SC-200 · Microsoft Security Operations Analyst

14 video lessons and 130 original practice questions. Follow the course, then put each idea into practice.

YouTube loads only after you press play. Watch on YouTube ↗

Course chapters

14 lessons
  1. 1Defender XDR settings3:16 · Lesson video
  2. 2Defender for Endpoint settings8:47 · Full-course chapter
  3. 3Device groups and automated response14:18 · Full-course chapter
  4. 4Automation in Microsoft Sentinel20:14 · Full-course chapter
  5. 5The Microsoft Sentinel platform25:59 · Full-course chapter
  6. 6Data ingestion31:37 · Full-course chapter
  7. 7Detections38:12 · Full-course chapter
  8. 8Incidents, cases, and Copilot54:12 · Full-course chapter
  9. 9Email, data, and cloud alerts1:00:04 · Full-course chapter
  10. 10Identities and apps1:06:07 · Full-course chapter
  11. 11Endpoint response1:12:21 · Full-course chapter
  12. 12Microsoft 365 activities1:18:03 · Full-course chapter
  13. 13Hunting in Defender XDR1:31:49 · Full-course chapter
  14. 14Hunting in the Sentinel platform1:37:38 · Full-course chapter

Practice by domain

Practise the reasoning.

Choose immediate explanations, or complete a mock exam with feedback at the end. The mock questions are also available in everyday practice.

The optional 60-minute timer is a practice setting, not the official exam duration.