For hands-on SC-200 practice, create a dedicated Microsoft 365 E5 trial tenant using Microsoft’s Defender XDR lab procedure; it provides 25 user licenses for one month rather than a permanently free tenant.^1^
Set up the trial tenant
- Open the Microsoft 365 E5 product portal from the Defender XDR lab guide and select Free trial.
- Register with a personal or corporate email address and complete phone verification.
- Choose the tenant’s
onmicrosoft.com domain.
- Create the initial administrator account and select Go to Setup.
- A custom corporate domain and additional users are optional; they can be skipped for a study lab.
- In the Microsoft 365 admin center, go to:
Billing → Purchase services → Microsoft 365 E5 → Start free trial.
- Go to Users → Active users, select the lab administrator, open Manage product licenses, assign Microsoft 365 E5, and save.^1^
- Visit the Microsoft Defender portal. With an eligible license and supported administrative role, Defender XDR turns on when the portal is opened. Selecting Incidents & alerts, Hunting, Action center, or Threat analytics initiates onboarding.^2^
Use only test identities, devices, email, and attack simulations in this tenant—not production data. This environment can support practice with incidents, alerts, advanced hunting, automated investigation and response, and Defender for Endpoint onboarding.
Longer-term free sandbox: only if eligible
The Microsoft 365 Developer Program can provide a free Microsoft 365 E5-enabled sandbox with 25 licenses, 24 test users, one administrator, and sample data. It is not an unrestricted training tenant: eligibility is required, and the subscription must be used actively for development and solution testing.^3^
Current qualification paths include:
- Eligible Visual Studio Professional or Enterprise subscriptions
- Eligible ISV Success or Microsoft AI Cloud Partner Program participation
- Premier or Unified Support customers
An ordinary Microsoft 365 production subscription does not automatically qualify. Eligible users provision the sandbox through the Developer Program dashboard; government-cloud tenants are not supported.^4^
Therefore, for SC-200 learning alone, the Microsoft 365 E5 one-month trial is the directly documented Defender XDR lab option. Use the Developer Program sandbox only if an eligible qualification path applies.
References
- Set up your Microsoft Defender XDR trial in a lab environment
- Turn on Microsoft Defender XDR
- Microsoft 365 Developer Program FAQ
- Welcome to the Microsoft 365 Developer Program