SC-200 renewal and retake rules
The Security Operations Analyst Associate earned with SC-200 is valid for 12 months and is renewed through a free, unproctored assessment on Microsoft Learn, not by sitting SC-200 again. Microsoft’s certification page lists the renewal frequency as 12 months. If you fail the exam itself, you can retake it after 24 hours. The English exam changes on October 21, 2026, which matters for anyone whose renewal window or study plan straddles that date.
The renewal assessment for the SOC analyst credential
Microsoft’s renewal page describes the mechanics for associate, expert and specialty certifications, and SC-200 follows them:
- Renewal costs nothing.
- The assessment opens six months before the expiry date. It cannot be taken earlier.
- Passing extends the certification by one year from the expiration date, so renewing early does not waste time.
- The assessment is online, open book and unproctored. Microsoft’s FAQ says it takes about 45 minutes and focuses on recent updates.
- There is no limit on attempts. A failed first or second attempt can be retried immediately; after the second try there is a wait of at least 24 hours between attempts.
Microsoft says the renewal item set is aligned with exam updates, and some items may have been drafted with AI but are reviewed by subject matter experts. For a SOC analyst this means the assessment tends to track product movement in Defender XDR and Sentinel rather than re-test fundamentals. The FAQ names no per-exam question counts or pass mark for renewal assessments, so this guide does not either.
What expiry actually means for SC-200
Microsoft’s credential expiration policy is blunt: after a certification expires, you can no longer renew it and must re-earn it by passing the required exam. There is no grace period and no alternative route; the FAQ states that neither a beta exam nor retaking the exam before expiry substitutes for the renewal assessment.
The consequence for SC-200 is practical. A lapsed holder faces the full SC-200 again, including the new Sentinel data lake and agentic investigation objectives, instead of a 45-minute update. Set a calendar entry for the start of the six-month window and aim to pass early in it, because expiry dates and times are in UTC.
SC-200 is not a prerequisite chain
Some Microsoft expert certifications require an associate credential. SC-200 does not feed one. Microsoft’s FAQ adds that where an associate prerequisite does exist, the expert credential does not expire automatically when the associate one does, as each is renewed separately. For SC-200 holders who also hold SC-300, SC-401 or SC-500, each has its own clock and its own renewal assessment, so the dates can drift apart. Record them side by side on your Learn profile.
Timeline around October 21, 2026
| Date | What changes |
|---|---|
| Before October 21, 2026 | The exam follows the earlier skills measured |
| October 21, 2026 | English exam and certification update; the study guide says the change log marks the audience profile and the first domain as unchanged, with a minor change to data ingestion |
| About eight weeks later | Localised versions are updated, per the study guide, though Microsoft says this schedule can slip |
If your renewal window opens near these dates, expect the renewal assessment to reflect the update too, since Microsoft aligns the two. Microsoft does not publish the exact switchover time for renewal items, so do not rely on a particular day. The exam changes page explains how to follow updates.
Retake rules for the SC-200 exam
The retake policy applies to all role-based, specialty and fundamentals exams:
| Situation | Rule |
|---|---|
| First failure | Wait 24 hours |
| Later failures | 14 days between each attempt, up to five attempts |
| Annual cap | No more than five attempts in 12 months from the first attempt; after five failures, eligible again 12 months after the first attempt |
| Passed exam | Cannot be retaken unless the certification has expired |
| Fee | Each retake is paid, where an exam fee applies |
| Waiver | Only for internet or equipment failure with a Pearson VUE case number |
The price varies by country and is shown at booking; see certification costs. A retake booked right after the October 21 update is still a full exam on the new outline, so review the changed objectives first.
Practical checks
Register with a personal Microsoft account, because Microsoft warns that records tied to a work account are lost when you leave the organisation, and that would take your renewal history with it. If you need accommodations, Microsoft publishes a request process. For the career side, see what SC-200 leads to; for the exam mechanics, see the exam format.