How hard is the SC-900 exam? +
SC-900 is an entry-level exam, but it trips people up because it spans Microsoft Entra, Defender, Sentinel, and Purview at once. The challenge is knowing which product owns which capability - for example, Purview versus Defender for Cloud Apps for data protection. Concepts like Zero Trust and shared responsibility are straightforward; product-to-feature recall is where candidates lose points.
What is the SC-900 exam format? +
SC-900 is a 45-minute exam, usually with 40 to 60 questions, though Microsoft does not fix the count. Question types include multiple choice, drag-and-drop, and yes/no statement sets. You can take it at a Pearson VUE test center or online with remote proctoring. There are no case studies or labs.
What is the passing score for SC-900? +
You need a scaled score of 700 out of 1,000. Because scores are scaled and items can be weighted differently, 700 does not mean exactly 70% of questions correct. Your score report breaks performance down by skill area, which shows where to focus if you need to retake.
How much does SC-900 cost and does it expire? +
The exam costs 99 USD in the US, with regional pricing elsewhere. There are no prerequisites. Microsoft Fundamentals certifications do not expire, so there is no annual renewal. If you fail, you can retake after 24 hours; after a second failure the wait is 14 days, with a maximum of five attempts in 12 months.
What are the biggest areas on SC-900? +
Microsoft security solutions is the largest domain at 35-40%, covering Defender XDR, Defender for Cloud, and Sentinel. Purview compliance solutions carry 20-25%, including sensitivity and retention labels, eDiscovery, insider risk, and Compliance Manager. Identity concepts and Microsoft Entra make up most of the rest. Candidates who focus only on identity basics tend to be caught out by product recall.
How long should I study for SC-900? +
Most candidates need 1 to 3 weeks of part-time study. Make sure your materials use current names - Azure AD is now Microsoft Entra ID, and the Defender and Purview portals have been consolidated. Older notes with legacy names cause second-guessing on correct answers phrased in current terminology.