Microsoft Security Operations Analyst

What it tests

Prep roadmap

1. 1
   Read the study guideWeek 1

   Go through the official skills-measured list on Microsoft Learn and tick off each objective.

   ▶ video✎ blog
2. 2
   Build a labWeek 2–4

   Use a free Azure account or Microsoft 365 trial tenant and practise every objective hands-on.

   ▶ video✎ blog
3. 3
   Cover the domainsWeek 5–6

   Start with the heaviest domains: Manage a security operations environment and Respond to security incidents.

   ▶ video✎ blog
4. 4
   Practice assessmentWeek 7–8

   Take the free Microsoft Learn practice assessment until you consistently score 80%+.

   ▶ video✎ blog
5. 5
   Book and sit the exam

   Schedule through Microsoft Learn with Pearson VUE — online proctored from home or at a test centre. Take the free Microsoft Learn practice assessment first.

   ▶ video✎ blog
6. ✓
   Certified 🎉

   Add it to LinkedIn and your CV — then pick the next step on the certification path.

What you can do after

• ✓Hunt threats with KQL in Sentinel
• ✓Investigate incidents across Defender XDR
• ✓Respond to identity attacks like token theft