SEC-210 Security Operations & Threat Hunting
Microsoft Sentinel, KQL, incident response, and SOC fundamentals. Prepares for SC-200.
- Level
- Intermediate
- Planned time
- 35 hours
- Area
- Infra Security
- Take first
- SEC-101
Exam this course prepares for
SC-200 Security Operations Analyst Associate Current
Checked on the official exam page, October 8, 2026. Official page
You should be able to
- Use Microsoft Sentinel for threat detection and response
- Write KQL queries for security investigations
Modules
- Microsoft Sentinel SetupLab · 180 min
- KQL for SecurityLab · 180 min
- Incident Response PlaybooksExercise · 120 min
- SC-200 Exam PreparationExercise · 240 min
Module times add to 12 h 0 min. The planned time above includes practice and review.