• This list contains the skills measured on the exam associated with this certification. For more detailed information, visit the exam details page and download the study guide.
• Design a Zero Trust strategy and architecture
• Evaluate Governance Risk Compliance (GRC) technical strategies and security operations strategies
• Design security for infrastructure
• Design a strategy for data and applications

Certification prerequisites

To become a Microsoft Certified: Cybersecurity Architect Expert, you must earn at least one of the following: Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Identity and Access Administrator Associate, Microsoft 365 Certified: Security Administrator Associate, Microsoft Certified: Security Operations Analyst Associate certification.

• Microsoft Certified: Azure Security Engineer Associate

  Option 1: Prerequisite certification

  Azure security engineers implement Azure security controls that protect identity, access, data, applications, and networks in cloud and hybrid environments as part of an end-to-end infrastructure.

• Microsoft Certified: Identity and Access Administrator Associate

  Option 2: Prerequisite certification

  The Microsoft identity and access administrator designs, implements, and operates an organization’s identity and access management systems by using Azure AD. They manage tasks such as providing secure authentication and authorization access to enterprise applications.

• Microsoft 365 Certified: Security Administrator Associate

  Option 3: Prerequisite certification

  Microsoft 365 security administrators proactively secure Microsoft 365 enterprise and hybrid environments, implement and manage security and compliance solutions, respond to threats, and enforce data governance.

• Microsoft Certified: Security Operations Analyst Associate

  Option 4: Prerequisite certification

  The Microsoft security operations analyst collaborates with organizational stakeholders to secure information technology systems for the organization. Their goal is to reduce organizational risk by rapidly remediating active attacks in the environment, advising on improvements to threat protection practices, and referring violations of organizational policies to appropriate stakeholders.