Free study guide

Microsoft SC-900 Study Guide

Microsoft Security, Compliance, and Identity Fundamentals SC-900

Microsoft Security, Compliance, and Identity Fundamentals (SC-900) introduces the basics of security, compliance and identity across Microsoft cloud services. It covers security and identity concepts, Microsoft Entra, Microsoft security solutions and Microsoft Purview compliance. It suits business stakeholders, new and existing IT professionals and students.

  • Exam code SC-900
  • Fundamentals level
  • 4 exam domains

This guide is free, with no sign-up. It explains every Microsoft SC-900 exam topic in plain English, one chapter at a time. Read them in order or jump straight to the topic you need.

  • 4chapters
  • 17topics
  • 6diagrams and exhibits
  • 1 h 32 minfast track
Start with Security, Compliance and Identity Concepts
  • Every topic follows the same simple pattern: what it is, how it works, common mistakes
  • Diagrams and real command output where a picture explains it best
  • Exam tips and worked subnetting and IPv6 practice, with answers

How the exam is weighted

Each domain is worth roughly this share of the exam. The exam provider publishes a range for each domain, so the bar marks the middle of it. Spend your study time in proportion, and select a domain to open its chapter.

Chapters

Open a chapter to see its topics and how long each takes.

1Security, Compliance and Identity Concepts3 topics · 15 min fast trackShared responsibility, defense in depth, Zero Trust, encryption, GRC and identity.
  1. 1Shared Responsibility and Defense in Depth5 min
  2. 2Zero Trust, Encryption and GRC5 min
  3. 3Identity Concepts5 min
Read the chapter overview →
2Capabilities of Microsoft Entra4 topics · 23 min fast trackEntra ID and identity types, authentication and MFA, Conditional Access, roles, governance and ID Protection.
  1. 1Entra ID and Identity Types6 min
  2. 2Authentication, MFA and Password Protection5 min
  3. 3Conditional Access and Roles6 min
  4. 4Identity Governance, PIM and ID Protection6 min
Read the chapter overview →
3Capabilities of Microsoft Security Solutions5 topics · 27 min fast trackAzure network security, Key Vault, Defender for Cloud, Microsoft Sentinel and Defender XDR.
  1. 1Azure DDoS Protection, Firewall and WAF5 min
  2. 2Network Segmentation, NSGs, Bastion and Key Vault6 min
  3. 3Defender for Cloud and CSPM5 min
  4. 4Microsoft Sentinel5 min
  5. 5Microsoft Defender XDR6 min
Read the chapter overview →
4Capabilities of Microsoft Compliance Solutions5 topics · 27 min fast trackService Trust Portal, Compliance Manager, labels, DLP, retention, insider risk and audit.
  1. 1Service Trust Portal and Privacy Principles5 min
  2. 2Purview Portal and Compliance Manager5 min
  3. 3Data Classification, Labels and DLP5 min
  4. 4Data Lifecycle, Records and Governance6 min
  5. 5Insider Risk, eDiscovery and Audit6 min
Read the chapter overview →

Ready for more practice?

The full Microsoft SC-900 question bank has 503 questions, with timed practice exams and an explanation for every answer.

SubscribeTry Sample Exam

This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.