SC-900 Real Exam Questions
Microsoft Security, Compliance, and Identity Fundamentals. Everything you need to prepare, practice, and pass.
113
Questions
5
Exam Domains
Included
Explanations
Ready to practice?
113+ questions with detailed explanations
Start NowFrom $49.99 USD · refund policy applies
Browse all 113 SC-900 questions
Certification Overview
SC-900 tests foundational knowledge of identity and access management (Microsoft Entra ID/Azure AD), compliance and data protection solutions (Microsoft Purview, DLP, retention), and Microsoft's integrated security platform (Defender suite). The exam emphasizes recognizing which Microsoft tools address specific security/compliance scenarios rather than deploying them.
What This Certification Proves
SC-900 validates foundational understanding of security, compliance, and identity concepts across Microsoft cloud services. This entry-level certification demonstrates awareness of security principles, Microsoft's security and compliance solutions (Defender, Purview), and identity management via Microsoft Entra—making it an ideal starting point for anyone entering IT security or compliance roles.
Who Should Take This Exam
Career changers entering IT security, compliance, or identity roles; non-technical professionals upskilling in cloud security; IT support staff transitioning to security; anyone seeking foundational security knowledge before pursuing advanced certifications like AZ-500 or SC-200.
Topic Breakdown
5 domains covering 113 questions
| Domain | Questions | Weight |
|---|---|---|
| Describe The Capabilities Of Microsoft Compliance Solutions | 36 | 32% |
| Describe The Capabilities Of Microsoft Security Solutions | 35 | 31% |
| Describe The Capabilities Of Microsoft Entra Id | 19 | 17% |
| Describe The Concepts Of Security, Compliance, And Identity | 15 | 13% |
| Describe The Capabilities Of Microsoft Entra | 8 | 7% |
Study Plans
Choose a study plan that matches your schedule and experience level
30 Days
Intensive Sprint
Week 1-2
- Master fundamentals: Describe The Capabilities Of Microsoft Compliance Solutions
- Read Microsoft official documentation
- Complete 4 questions daily
Week 3
- Deep dive: Describe The Capabilities Of Microsoft Security Solutions
- Review weak areas from results
- Take 2 full-length exams
Week 4
- Review all flagged questions
- Timed exams to build stamina
- Final revision of key concepts
60 Days
Balanced Approach
Week 1-2
- Survey all exam domains
- Set up study environment
- Begin with foundational topics
Week 3-4
- Focus: Describe The Capabilities Of Microsoft Compliance Solutions
- Focus: Describe The Capabilities Of Microsoft Security Solutions
- 2 questions daily
Week 5-6
- Focus: Describe The Capabilities Of Microsoft Entra Id
- Hands-on labs if applicable
- Review explanations for wrong answers
Week 7-8
- Complete all 113 questions
- Identify and eliminate weak areas
- Take 3 full-length timed tests
90 Days
Comprehensive Study
Month 1
- Learn all exam domains at a comfortable pace
- Build strong foundational knowledge
- 2 questions daily
Month 2
- Deep dive into each domain
- Hands-on practice and labs
- Take weekly timed exams
Month 3
- Work through all 113 questions
- Identify and eliminate weak areas
- Take 3 full-length timed exams
SC-900-Specific Tips
- Focus heavily on Microsoft Entra ID (identity/access) and Microsoft Purview (compliance/data governance)—these are the exam's technical core
- Use Microsoft Learn free training modules, which align directly with exam domains; they're designed for this certification
- Study the compliance frameworks (DLP, eDiscovery, retention policies) conceptually—you don't need hands-on; understand the 'why' not implementation details
- Review Microsoft 365 Defender's role in threat detection and incident response as a key security solution domain
- Take practice exams early (week 2) to identify weak domains, then deep-dive those areas—the 1.4 difficulty means most questions test recall, not scenarios
- Create concept maps linking identity → access control → compliance, since these domains interconnect across the exam
- Prioritize understanding security posture (Zero Trust principles, least privilege) as foundational context for all other topics
Relevant Career Roles
Sample Questions
Try 5 free questions from the SC-900 question bank
What is an assessment in Compliance Manager?
Which feature provides the extended detection and response (XDR) capability of Azure Sentinel?
What does Conditional Access evaluate by using Microsoft Entra ID Protection?
You need to create a data loss prevention (DLP) policy. What should you use?
In the shared responsibility model, for what is Microsoft responsible when managing Azure virtual machines?
Related Certifications
Other Microsoft certifications you might be interested in
AZ-104
Microsoft Azure Administrator
From $49.99
AZ-500
Microsoft Azure Security Technologies
From $49.99
AZ-305
Designing Microsoft Azure Infrastructure Solutions
From $49.99
AZ-900
Microsoft Azure Fundamentals
From $49.99
AZ-400
Microsoft Azure DevOps Solutions
From $49.99
AZ-204
Developing Solutions for Microsoft Azure
From $49.99
SC-900 FAQ
Ready to pass SC-900?
Join thousands of professionals who passed their certification exam with NerdExam.
Get SC-900 Exam Questions