Skip to content
Cheat sheets
Associate · SC-300Prep available

Microsoft Certified: Identity and Access Administrator Associate (SC-300) practice exam and study path

A free, timed 60-question SC-300 practice exam in 100 minutes, scored by domain, with every option explained after you submit. Also 124 practice questions you can check one at a time, a page for every task in the exam guide, and a study path. No sign-up.

Start the free practice examGet the exam packPractise question by question →
Identity and Access Administrator Associate exam pack:

$6.99for 12 months

For identity administrators who run Microsoft Entra: tenants, roles and hybrid sync, external users, authentication methods, Conditional Access, ID Protection and Global Secure Access, workload identities and enterprise apps, and governance with entitlement management, access reviews, PIM and sign-in logs.

The exam

Exam code
SC-300
Questions
Not yet published
Time
100 minutes
Passing score
700 of 1,000 (scaled)
Exam fee
$165 (USD)
Question types
multiple choice, multiple response

Exam SC-300 is a proctored role-based exam: 100 minutes, offered in ten languages through Pearson VUE, it may include interactive components, and 700 passes. Microsoft doesn't publish the number of questions (most of its exams have 40 to 60). The fee is set by the country or region (USD 165 in the United States, the price of Microsoft's SC role-based exams), and the certification renews every year with a free online assessment. The English exam moves to new skills measured on October 28, 2026, and our questions follow that version. Our forms use 60 questions split 14 / 18 / 14 / 14, close to the midpoints of the guide's ranges.

From Microsoft's certification page and exam guide, checked Oct 25, 2026.

Domains and weights

  • Domain 1: Implement and manage user identities

    24%

  • Domain 2: Implement authentication and access management

    29%

  • Domain 3: Plan and implement workload identities

    24%

  • Domain 4: Plan and automate identity governance

    23%

On our roadmap this comes after Azure Fundamentals. See every certification.

Practice

124 original practice questions, every option explained with the Microsoft documentation page that proves it. Free, no sign-up; progress stays on this device.

Your results on this device →

More practice exams

The lessons, the sample questions on every task page and the first full practice exam are free and stay free. A pack adds the further timed SC-300 practice exams.

Identity and Access Administrator Associate exam pack

$6.99for 12 months

  • Every paid SC-300 practice exam, timed, with every option explained
  • The next version of this exam included when it changes within your 12 months
  • 12 months of access. One payment, nothing renews by itself.
  • 14-day refund, no conditions
  • 14-day refund, no conditions: ask within 14 days of buying and you get the whole payment back.
  • No pass guarantee. These are practice exams written by us from the exam guide and the Microsoft documentation; a score here does not predict your result on the real exam.

Study path

One module per exam domain. Lessons that already exist on BytePatterns are linked; the rest are being written.

  1. Module 1: Implement and manage user identities

    1. 1Built-in and custom Microsoft Entra roles and effective permissionsTask 1.1

      Partly covered by: Shared Responsibility & IAM

    2. 2Administrative units and restricted management administrative unitsTask 1.1

      Lesson coming

    3. 3Custom domains, company branding and tenant, user, group and device settingsTask 1.1

      Lesson coming

    4. 4Users, groups, dynamic membership and custom security attributesTask 1.2

      Lesson coming

    5. 5Bulk operations, device join and registration, and group-based licensingTask 1.2

      Lesson coming

    6. 6External collaboration settings, B2B invitations and guest accountsTask 1.3

      Lesson coming

    7. 7Cross-tenant access settings and cross-tenant synchronizationTask 1.3

      Lesson coming

    8. 8SAML/WS-Fed identity provider federationTask 1.3

      Lesson coming

    9. 9Microsoft Entra Connect Sync and Cloud SyncTask 1.4

      Lesson coming

    10. 10Password hash sync, pass-through authentication and seamless SSOTask 1.4

      Lesson coming

    11. 11Moving from AD FS to cloud authentication, and Connect HealthTask 1.4

      Partly covered by: Migration: The 7 Rs, TCO & Waves

  2. Module 2: Implement authentication and access management

    1. 12The authentication methods policy: passkeys, Authenticator, certificates and Temporary Access PassTask 2.1

      Lesson coming

    2. 13Tenant-wide MFA settings, SSPR and password protectionTask 2.1

      Lesson coming

    3. 14Windows Hello for Business, Microsoft Entra Kerberos and session revocationTask 2.1

      Lesson coming

    4. 15Conditional Access assignments, conditions and grant controlsTask 2.2

      Lesson coming

    5. 16Report-only mode, What If and troubleshooting sign-insTask 2.2

      Lesson coming

    6. 17Session controls, continuous access evaluation and token protectionTask 2.2

      Lesson coming

    7. 18Authentication context, protected actions and policy templatesTask 2.2

      Lesson coming

    8. 19User risk and sign-in risk policies, and registration campaignsTask 2.3

      Lesson coming

    9. 20Investigating and remediating risky users, sign-ins and workload identitiesTask 2.3

      Lesson coming

    10. 21Global Secure Access clients and traffic forwarding profilesTask 2.4

      Lesson coming

    11. 22Microsoft Entra Private Access and Internet AccessTask 2.4

      Lesson coming

  3. Module 3: Plan and implement workload identities

    1. 23Managed identities, service principals and managed service accountsTask 3.1

      Partly covered by: Shared Responsibility & IAM

    2. 24Enterprise application settings, owners and rolesTask 3.2

      Lesson coming

    3. 25Application proxy for on-premises web appsTask 3.2

      Lesson coming

    4. 26SaaS single sign-on, SCIM provisioning and app assignmentTask 3.2

      Lesson coming

    5. 27User consent, admin consent and My Apps collectionsTask 3.2

      Lesson coming

    6. 28App registrations: account types, redirect URIs, credentials and API permissionsTask 3.3

      Lesson coming

    7. 29App roles and their assignmentTask 3.3

      Lesson coming

    8. 30Cloud discovery, connected apps and the cloud app catalogTask 3.4

      Lesson coming

    9. 31Conditional Access app control: access and session policiesTask 3.4

      Lesson coming

    10. 32OAuth app policies and application-enforced restrictionsTask 3.4

      Lesson coming

  4. Module 4: Plan and automate identity governance

    1. 33Catalogs, access packages and request policiesTask 4.1

      Lesson coming

    2. 34External users, connected organizations and terms of useTask 4.1

      Lesson coming

    3. 35Planning and creating access reviewsTask 4.2

      Lesson coming

    4. 36Monitoring and acting on access reviewsTask 4.2

      Lesson coming

    5. 37PIM for Microsoft Entra roles, Azure resources and groupsTask 4.3

      Partly covered by: Shared Responsibility & IAM

    6. 38PIM approvals, audit history and emergency access accountsTask 4.3

      Lesson coming

    7. 39Sign-in, audit and provisioning logs and diagnostic settingsTask 4.4

      Partly covered by: Observability Basics

    8. 40KQL in Log Analytics, workbooks and Identity Secure ScoreTask 4.4

      Lesson coming

Every task in the exam guide

The exam guide splits each domain into task statements. Each one has a page with a short summary, the lessons that teach it and open sample questions.

Domain 1: Implement and manage user identities

Domain 2: Implement authentication and access management

Domain 3: Plan and implement workload identities

Domain 4: Plan and automate identity governance

How these questions are made

  • Written by us from the exam guide's task statements and the Microsoft documentation — never from real exam content.
  • Every option carries its own explanation and a link to the Microsoft page that proves it.
  • A question enters a timed exam only after an independent check; until then it is a practice question.
  • Results are a plain percentage, per domain too — not an imitation of Microsoft's scaled score.

Questions about the SC-300 practice exam

Is the SC-300 practice exam free?
Yes. The full practice exam (60 questions, 100 minutes) is free with no sign-up, and so are the 124 practice questions, the task pages and the study path. Your attempts are saved in this browser, on this device.
How many questions does it have, and is it timed?
60 questions in 100 minutes: the real SC-300 pace, scaled to this form. When the time runs out, the exam is submitted as it stands.
Are the answers explained?
After you submit, not during: like the real exam, the timed exam gives no feedback until the end. Then you get your score overall and per exam domain, and every question with each option explained and a link to the Microsoft documentation page behind it. In practice mode an answer is explained as soon as you check it.
What does the Identity and Access Administrator Associate exam pack add?
3 more timed practice exams (Practice exam 1: 60 questions, 100 minutes; Practice exam 2: 60 questions, 100 minutes; Practice exam 3: 60 questions, 100 minutes), each scored and explained the same way, and the next version of this exam if it changes within your 12 months. 12 months of access. One payment, nothing renews by itself. Everything above stays free. See the pack.
Can I get a refund?
Yes, with no conditions: ask within 14 days of buying and you get the whole payment back. The details are in the terms.
Is this an official Microsoft practice exam?
No. BytePatterns is not affiliated with, endorsed or sponsored by Microsoft. Every question is written by us from the public exam guide and the Microsoft documentation, never from real exam content, and a score here does not predict your result on the real exam. Microsoft lists its own preparation resources on its certification page.