SC-900 covers the basics of security, compliance and identity across Microsoft’s cloud services: Microsoft Entra, Microsoft Defender, Microsoft Sentinel and Microsoft Purview. It’s a quick, useful credential for anyone who works with Microsoft 365 or Azure.
I passed SC-900 on 29 January 2026. On this page you’ll find what the exam covers, how I’d prepare if I were starting today, a free study plan, and ways to work with me if you want help getting across the line.
Get the free SC-900 study plan ยท Book a session
How I passed
What the exam covers
The skills outline has four areas:
- Describe the concepts of security, compliance and identity
- Describe the capabilities of Microsoft Entra
- Describe the capabilities of Microsoft security solutions
- Describe the capabilities of Microsoft compliance solutions
Exam format
- Passing score: 700 out of 1000
- Fundamentals certifications don’t expire.
Exam details change. Check the official exam page before you book. Official SC-900 page.
Who it’s for
IT and security staff new to Microsoft’s security stack, compliance and risk professionals, and managers who need to speak the language of Zero Trust.
How to prepare
- Start with the concepts: Zero Trust, defense in depth, the shared responsibility model, authentication versus authorization.
- Know what each product does: Entra ID, Defender XDR, Defender for Cloud, Sentinel and Purview.
- Learn Conditional Access, MFA and Privileged Identity Management at a high level.
- Understand Purview’s information protection, data loss prevention and eDiscovery features.
- The free Microsoft Learn path is enough for most candidates.
Free SC-900 study plan
Get my step-by-step SC-900 study plan by email: what to study each week, the resources worth your time, and a checklist for the week before the exam. It’s free.
[FORM: email signup for the SC-900 study plan. Tag subscribers with “SC-900” so follow-up emails match this exam.]
SC-900 course
If you’d rather follow a structured path, my SC-900 course walks you through every exam domain with lessons, labs where they apply, and practice questions. You can also browse practice exams and guides in the store.
Book a session
Stuck on a domain, failed once already, or short on time? In a 1:1 session we go through where you are, what’s left, and a plan to get you to exam day. Book a session, or see 1:1 certification coaching. Training a team? Ask about corporate team training.
Verify
I hold the Microsoft Certified: Security, Compliance, and Identity Fundamentals certification. Passed 29 January 2026.
What to take next
Related security certifications: