📋 2026 Edition · Updated November 2026

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Study Guide 2026

Q: How long does it take to prepare for the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) exam?

Most candidates with relevant background take 4-8 weeks studying 1-2 hours daily. Beginners may need longer depending on their current knowledge and experience.

Q: What is included in the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) study guide?

The study guide covers the exam syllabus, domain-wise topics, study roadmap, preparation strategy, exam tips and links to practice, mock exams, readiness testing and other preparation resources.

Q: Is this Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) study guide enough to pass the exam?

The study guide is designed to organize your preparation around the exam syllabus and domains. Candidates should also use practice questions and timed simulations to test their ability to apply what they have learned.

Q: Can beginners use this Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) study guide?

Yes. The guide can be used to understand the exam domains, identify the topics to study and follow a structured preparation roadmap.

Q: How many practice questions should I do?

There is no universal number that guarantees readiness. Focus on understanding why answers are correct or incorrect and use timed practice to identify gaps in your preparation.

Q: How can I identify my weak areas?

Use the Edureify readiness diagnostic to assess your preparation and identify weaker exam domains before deciding where to spend additional study time.

Complete exam coverage for the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900): syllabus, domains, key topics, study plan and practical exam preparation strategy.

40-60

Questions

45 min

Duration

700

Passing score

Domains

Start Practice Test & Get My Study Plan Take Readiness Diagnostic

Your readiness score - take the free diagnostic to unlock your personalised analysis

Overall readiness (locked)

Describe the concepts of security, compliance, and identity

Describe the capabilities of Microsoft Entra

Describe the capabilities of Microsoft security solutions

Describe the capabilities of Microsoft compliance solutions

Run 10-Minute Free Diagnostic →

Exam at a Glance

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Exam Overview

Key facts about the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) exam structure, format and scoring.

🆔

security-compliance-identity-fundamentals-sc-900

Exam code

📝

40-60 questions

Total questions

⏱

45 minutes

Duration

🎯

700

Passing score

📋

4 domains

Exam domains

🏆

Certification

Credential type

ℹ️

Scoring method: Microsoft reports a scaled score from 1 to 1,000 and 700 or greater is required to pass; the scale is not a percentage and items can carry different weights. Some items may be unscored, and the result with a skill-area performance breakdown is shown immediately after the exam for most exams. Fundamentals certifications do not expire.. The exam may include unscored pilot questions - treat every question seriously.

Focus Areas

What should you study for the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) exam?

Start with the domains that make up the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) exam. Use the detailed syllabus below to work through the individual topics.

⚠️

Common mistake: Candidates often memorise terminology but struggle with scenario-based questions. Focus on when to use what, not just what exists.

🔐

Describe the concepts of security, compliance, and identity (13%)

Explaining core security, compliance and identity principles.

🏗

Describe the capabilities of Microsoft Entra (28%)

Describing Entra ID identity types, authentication, access management, protection and governance.

⚡

Describe the capabilities of Microsoft security solutions (37%)

Describing Azure infrastructure security, Defender for Cloud, Sentinel and Defender XDR.

💰

Describe the capabilities of Microsoft compliance solutions (22%)

Describing the Service Trust Portal and Microsoft Purview compliance, data protection and risk capabilities.

Full Syllabus

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Exam Syllabus and Topics

The Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) exam is divided into 4 domains. Each domain covers specific skills and topics. Expand a domain to see the detailed syllabus.

Security and compliance concepts

Shared responsibility model

Defense in depth

Zero Trust model

Encryption and hashing

Governance, risk and compliance (GRC)

Identity concepts

Identity as the primary security perimeter

Authentication versus authorization

Identity providers

Directory services and Active Directory

Federation

~8 questions

13 marks

13% of exam weight

Entra ID functions and identity types

Microsoft Entra ID

User, device and workload identities

Hybrid identity

External identities

Authentication capabilities

Authentication methods

Multifactor authentication

Self-service password reset

Password protection

Access management

Conditional Access

Microsoft Entra roles

Role-based access control

Least-privilege administration

Identity protection and governance

Microsoft Entra ID Governance

Access reviews

Privileged Identity Management

Microsoft Entra ID Protection

~17 questions

28 marks

28% of exam weight

Core Azure infrastructure security

Azure DDoS Protection

Azure Firewall and Web Application Firewall

Virtual network segmentation and NSGs

Azure Bastion

Azure Key Vault

Azure security management

Microsoft Defender for Cloud

Cloud security posture management (CSPM)

Security policies, standards and recommendations

Cloud workload protection

Microsoft Sentinel

SIEM and SOAR concepts

Threat detection in Sentinel

Automated response with playbooks

Hunting and investigation

Threat protection with Microsoft Defender XDR

Defender for Office 365 and Defender for Endpoint

Defender for Cloud Apps and Defender for Identity

Defender Vulnerability Management

Microsoft Threat Intelligence

Microsoft Defender portal

~22 questions

37 marks

37% of exam weight

Service Trust Portal and privacy

Service Trust Portal offerings

Microsoft privacy principles

Microsoft Purview portal

Compliance Manager and compliance score

Information protection, data lifecycle and governance

Data classification

Content explorer and Activity explorer

Sensitivity labels and label policies

Data loss prevention

Records management and retention labels and policies

Insider risk, eDiscovery and audit

Insider risk management

eDiscovery in Microsoft Purview

Audit solutions

Audit (Standard) versus Audit (Premium)

~13 questions

22 marks

22% of exam weight

Study Plan

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Structured Study Roadmap

Choose a preparation timeline based on how much time you have available. For a plan based on your actual readiness and weak domains, use the personalised Edureify study experience. Get My Training Plan →

Weeks 1-2

Core Services + Highest-Weighted Domain

Deep-dive into the most heavily tested domain. Spend more time here when its exam weight is significantly higher.

Official exam guideDomain 1 completeCore conceptsPractice questions

Week 3

Domain 2 - Hands-on Practice

Focus on scenario-based study and reinforce concepts through practical application where applicable.

Domain 2Scenario walkthroughsHands-on practicePractice questions

Week 4

Domain 3 - Deeper Concepts

Work through complex concepts and decision scenarios.

Domain 3Scenario drillsPractice examReview

Week 5

Remaining Domains + Weak Area Targeting

Identify your weaker domains and spend focused time closing those gaps.

Remaining domainsDiagnosticTargeted reviewStudy notes

Week 6

Full Simulations + Final Preparation

Use timed simulations to test your preparation and review the reasoning behind incorrect answers.

Full mock examsWrong-answer reviewFinal reviewExam logistics

Exam Strategy

Tips to pass Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) on your first attempt

Practical advice for applying what you know, managing questions and preparing for exam conditions.

🗓

Microsoft security solutions is the largest domain (35-40%): know what Defender for Cloud, Sentinel and each Defender XDR product does.

🔍

Practise mapping a stated need to the right product, for example Purview DLP versus Defender for Cloud Apps for data protection.

⏭

Learn current names: Azure AD is Microsoft Entra ID, and the Defender and Purview portals have been consolidated.

📊

Purview compliance is 20-25%: distinguish sensitivity labels, retention labels, DLP, insider risk, eDiscovery and Compliance Manager.

🔁

Expect Yes/No statement sets and drag-and-drop items in a 45-minute exam; read each statement independently.

Recommended Resources

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Study Resources

Use a focused set of resources alongside the study guide rather than trying to study from everything available.

Official

Official Exam Guide

Start with the authoritative exam objectives and blueprint.

→ Vendor website

Practice Tests

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Practice Test

Practice questions with explanations and domain-level performance analysis.

→ Start free practice test

Mock Exam

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Mock Exam

Timed preparation under realistic exam-style conditions.

→ Take free mock exam

Training

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Certification Training

Structured preparation with personalised learning support and adaptive practice.

→ Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) certification online training

AI Tutor

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) AI Tutor

Get help understanding concepts and work on weak areas with AI-powered learning support.

→ Try Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) AI tutor

Reference

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Cheat Sheet

Quick-reference summaries for final revision.

→ Get free cheat sheet

Diagnostic

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Readiness Test

Assess your preparation and identify weaker exam domains.

→ Check my readiness

⚠️

Avoid brain dumps. Sites selling real or stolen exam questions may violate certification-provider rules and can leave candidates studying outdated material.

Reviews

What candidates say after passing

FAQ

Frequently asked questions about Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)

How long does it take to prepare for the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) exam?

Most candidates with relevant background can structure their preparation over several weeks, depending on their existing knowledge, available study time and exam difficulty. Use the study roadmap above as a starting point and use the readiness diagnostic to identify where you need more preparation.

What is included in the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) study guide?

The guide covers the exam overview, domains, detailed syllabus and topics, study roadmap, exam preparation tips and links to practice, mock, readiness, cheat-sheet, AI Tutor and training resources.

Is this Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) study guide enough to pass the exam?

The guide is designed to organize your preparation around the exam syllabus. You should combine it with practice questions and timed simulations so that you can test both your knowledge and your ability to apply it.

Can beginners use this Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) study guide?

Yes. Start with the exam overview and domain breakdown, then work through the detailed topics using the study roadmap. Candidates with less experience may need additional time for foundational concepts.

How can I identify my weak areas?

Take the Edureify readiness diagnostic to assess your preparation and identify the domains where you need to focus more.

How does AI improve my preparation?

Edureify AI can help explain concepts, identify weaker areas from practice performance and support a more personalised preparation process.

Ready to prepare for Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)?

Find your weak areas and build a more focused preparation plan.

Start My Free Diagnostic →

95% first-attempt pass rate47,000+ candidates4.9★ ratingNo credit card needed

Keep Learning

Related Cybersecurity Certification Study Guides

Explore related certification study guides within this category.

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Study Guide 2026

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Exam Overview

What should you study for the Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) exam?

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Exam Syllabus and Topics

Know if you'll pass Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) before exam day

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Structured Study Roadmap

Tips to pass Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) on your first attempt

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Study Resources

What candidates say after passing

Frequently asked questions about Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)

Ready to prepare for Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)?

Related Cybersecurity Certification Study Guides