Week-by-Week Schedule

Week 9— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

9 days

Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 3 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 3 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 3 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

Week 10— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

21 days

(continued)Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

Week 11— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

21 days

(continued)Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

Week 12— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

21 days

(continued)Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

Week 13— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

18 days

(continued)Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 6 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 6 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 6 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

How to use this 90-day plan

→Commit to 1 hour per day — consistency beats marathon sessions.

→Start each domain by reading the objective description, then immediately move to practice questions.

→Don't skip domains with low weight — exam questions can come from any domain.

→When you finish a domain, score ≥ 80% on its practice questions before moving on.

→In the final 3 days, do full mixed-domain practice tests to simulate real exam conditions.

→Review wrong answers immediately — understanding why you were wrong is more valuable than getting it right.

Week-by-Week Schedule

Week 9— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

9 days

Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 3 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 3 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 3 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

Week 10— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

21 days

(continued)Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

Week 11— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

21 days

(continued)Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

Week 12— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

21 days

(continued)Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 7 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

Week 13— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

18 days

(continued)Mitigate threats using Microsoft Defender XDR
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 6 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Defender for Cloud
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 6 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.
(continued)Mitigate threats using Microsoft Sentinel
Use this page to practise threats, attacks and vulnerabilities questions. CompTIA Security+ is scenario-heavy here — you must identify not just the attack type but the most appropriate response.
📅 6 days🎯 ~4 questions/day
Study →
- ✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
- ✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
- ✓Vulnerability scanning vs penetration testing vs risk assessment.

How to use this 90-day plan

→Commit to 1 hour per day — consistency beats marathon sessions.

→Start each domain by reading the objective description, then immediately move to practice questions.

→Don't skip domains with low weight — exam questions can come from any domain.

→When you finish a domain, score ≥ 80% on its practice questions before moving on.

→In the final 3 days, do full mixed-domain practice tests to simulate real exam conditions.

→Review wrong answers immediately — understanding why you were wrong is more valuable than getting it right.

SC-200 90-Day Study Plan

Domain Allocation

Week-by-Week Schedule

Week 9— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

Week 10— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

Week 11— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

Week 12— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

Week 13— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

How to use this 90-day plan

Other study plan lengths

SC-200 90-Day Study Plan

Domain Allocation

Week-by-Week Schedule

Week 9— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

Week 10— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

Week 11— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

Week 12— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

Week 13— Mitigate threats using Microsoft Defender XDR · Mitigate threats using Microsoft Defender for Cloud · Mitigate threats using Microsoft Sentinel

How to use this 90-day plan

Other study plan lengths