Master security concepts, Microsoft identity and access management, security solutions, and compliance tools to protect organizations in the cloud.
SC-900 validates your foundational knowledge of security, compliance, and identity concepts across cloud-based and related Microsoft services. This certification demonstrates your understanding of Microsoft security, compliance, and identity solutions, including Azure Active Directory, Microsoft Defender, Sentinel, and compliance tools. It's ideal for those interested in security careers or anyone who needs to understand security fundamentals in cloud environments.
Security, Compliance, and Identity Fundamentals
After completing all 3 phasesThe official Microsoft SC-900 exam tests your knowledge across four key areas:
If you're new to security and compliance:
→Begin with Phase 1: Understand Security Fundamentals (expand below)
→No prior security knowledge required — this is designed for beginners!
→Focus on understanding core concepts before diving into tools
→Complete each phase fully before moving to the next
Ready to get started?
→Create a free Azure account to explore security features hands-on
Shared responsibility, defense in depth, Zero Trust model, encryption basics
Authentication vs authorization, identity as security perimeter, SSO, MFA
Compliance concepts, data residency, regulatory requirements, privacy
Symmetric vs asymmetric encryption, hashing, certificates, key management
Azure AD overview, users and groups, MFA, Conditional Access, identity protection
Azure Defender, Microsoft 365 Defender, endpoint protection, threat intelligence
SIEM overview, Sentinel capabilities, security orchestration, threat detection
Azure Security Center, secure score, security policies, recommendations
NSGs, Azure Firewall, DDoS protection, VPN security
Secrets management, key management, certificate management
Microsoft Purview, compliance manager, compliance score, data classification
Data loss prevention, sensitivity labels, information governance
Azure Policy, resource locks, blueprints, management groups
Audit logs, eDiscovery capabilities, content search
SC-900: Microsoft Security, Compliance, and Identity Fundamentals
This certification validates your foundational knowledge of security, compliance, and identity across cloud-based and related Microsoft services. It's perfect for those starting a career in security or anyone who needs to understand these critical concepts!
Practice SC-900 QuestionsDescribe Zero Trust, defense in depth, shared responsibility, and encryption
Configure users, groups, MFA, and Conditional Access policies
Explain capabilities of Azure Defender and Microsoft 365 Defender
Describe SIEM capabilities and Azure Sentinel features
Use Microsoft Purview and understand compliance requirements
Score consistently well on SC-900 practice questions and mock exams