The short version
Microsoft does not list formal prerequisites for SC-300: you can book the exam without holding another certification. It does say you should be familiar with Azure, Microsoft 365 services and workloads, and Active Directory Domain Services (AD DS), and with PowerShell and Kusto Query Language (KQL). This page turns that into a checklist you can test yourself against. Facts come from Microsoft Learn, checked October 18, 2026.
Required versus recommended
| Required | Recommended | |
|---|---|---|
| Other certifications | None listed by Microsoft | None required; Microsoft names no preceding certification on the pages we checked |
| Platform knowledge | None enforced | Azure, Microsoft 365, and AD DS |
| Tools | None enforced | PowerShell and KQL |
| Hands-on time | None enforced | Time in the Microsoft Entra admin center |
The last row is our advice, not Microsoft’s. The exam audience profile describes an administrator who designs, implements, and operates identity and access, so experience helps.
What to know before you start
- Directory basics. What a user, group, domain, and tenant are, how Active Directory Domain Services works, and what a forest is.
- Cloud and Microsoft 365 basics. Subscriptions, resources, licenses, and how Microsoft 365 apps sign users in.
- Security concepts. Authentication versus authorization, multifactor authentication, single sign-on, least privilege, and Zero Trust. Microsoft lists applying Zero Trust principles as part of the role.
- Light scripting and queries. Reading PowerShell commands that create or change users, and reading a short KQL query.
If the security basics are new to you, the SC-900 exam covers many of them at a gentler level. Microsoft does not require SC-900 for SC-300, so this is optional.
Skills self-check
Answer honestly. Aim for “yes, and I could show someone” on most lines before booking.
Users and hybrid (domain 1)
- I can explain what an administrative unit does and when to use one.
- I can tell a B2B guest from an internal user and know where external collaboration settings live.
- I know what Connect Sync and Cloud Sync do and the difference between password hash sync and pass-through authentication.
Authentication and access (domain 2)
- I can name the main authentication methods and what a Temporary Access Pass is for.
- I can design a Conditional Access policy with assignments, conditions, and grant or session controls.
- I know the difference between user risk and sign-in risk.
Workload identities (domain 3)
- I can say when to use a managed identity instead of a service principal.
- I know the difference between an app registration and an enterprise application.
- I understand what Application Proxy does for an on-premises app.
Governance (domain 4)
- I can describe a catalog, an access package, and an access review.
- I know eligible versus active assignments in Privileged Identity Management.
- I can read a basic KQL query against sign-in logs.
If you ticked fewer than half, plan the eight-week route in the study plan.
Things that can help
- A trial or developer tenant for labs. Some features need premium licensing, so check what your trial includes.
- Microsoft’s free learning paths for SC-300 on Microsoft Learn, and the free practice assessment Microsoft offers.
- Reading the Microsoft Learn SC-300 study guide before anything else, so you know the scope.
More guides for SC-300
- SC-300 Exam Format, Scoring and Retakes
- SC-300 Domains Explained With Examples
- SC-300 Sample Questions With Answers
- SC-300 Renewal and Retakes Explained
- Is SC-300 Worth It? An Honest Look
- SC-300 Cheat Sheet: Key Facts to Review
- SC-300 vs SC-500: Which Exam First?
Next step
When you have an honest picture of your background, check how hard others find the exam on the is SC-300 hard page. To test your current level, try our SC-300 practice tests, starting with the first set as a baseline.
Frequently asked questions
Do I need SC-900 first?
No. Microsoft does not require it. It can be a gentle start if security and identity terms are new to you.
Do I need a job in IT to pass?
No rule says so, but the exam assumes administrator-level thinking. Hands-on practice in a trial tenant can stand in for some work experience.
Is there an age or experience requirement?
Microsoft lists none on the pages we checked.