SC-300 study resources
The best SC-300 resources are free: Microsoft’s study guide with the skills outline, the official practice assessment and sandbox, the Entra documentation, and a test tenant where you build the things the outline names. Add realistic practice questions to find your weak domain. Be careful with old material: Azure Active Directory is now Microsoft Entra ID, and courses that use the old name throughout predate parts of the current outline.
Start with the official material
| Resource | Use it for |
|---|---|
| Exam SC-300 study guide | The skills measured with weights, the October 28, 2026 change log and links to documentation |
| Official certification page | Duration, languages, scheduling, renewal and learning paths |
| Free practice assessment | Question style and your weak domains |
| Exam sandbox | The exam interface and question types |
Check the date on the study guide. The English outline changes on October 28, 2026, so use the version that matches your exam date.
Documentation worth reading
Microsoft’s study guide itself links to these areas of documentation, and they map to the skill areas:
- Microsoft Entra ID documentation for users, groups, devices, Conditional Access and applications.
- Microsoft Entra External Identities documentation for guests, cross-tenant settings and federation.
- Azure AD Multi-Factor Authentication overview for the authentication area.
- What is Microsoft Entra ID Governance? for entitlement management and access reviews.
- What is Privileged Identity Management? for PIM.
- Microsoft Entra monitoring and health for logs and reports.
- Identity management best practices for general guidance.
The exam is written against the behaviour these pages describe, so read the quickstarts and how-to guides, not just the overviews. Microsoft’s Exam Readiness Zone also has SC-300 preparation videos.
Lab work is the differentiator
SC-300 describes a configuration and asks what is wrong or missing. Five labs cover most of it:
- Tenant and hybrid. An administrative unit with a scoped role, a dynamic group, a bulk guest invite and a cross-tenant access setting.
- Conditional Access. Report-only policies, What If, a block for legacy authentication, a compliant-device requirement and authentication context.
- Sign-in methods. A Temporary Access Pass, a passkey, a registration campaign and a user risk policy.
- Apps. An app registration with an application permission, admin consent workflow, Application Proxy and a Defender for Cloud Apps session policy.
- Governance. An access package with expiry, a recurring access review, an eligible PIM role with approval, emergency access accounts and a KQL query on sign-in logs.
Some features need premium or governance licences; confirm the requirement before you start, and use a tenant that is not production.
Practice questions
Use the free 20-question practice test and the sample questions here, then the official assessment. Log wrong answers by domain and revisit that guide. The skills outline page and the glossary explain how to read an outline and key terms. Follow the study plan so each resource has a week.
What to skip
- Exam dumps. They are against Microsoft’s exam policy and often wrong or outdated.
- Courses that use only the old Azure AD names, with no mention of Global Secure Access, passkeys or the current Entra features.
- Click-path memorisation. Menus move; the exam asks which setting, role or policy meets a requirement.