Microsoft
Microsoft SC-900
Microsoft Certified: Security, Compliance, and Identity Fundamentals (Exam SC-900)
A fundamentals-level certification covering security, compliance, and identity concepts and Microsoft solutions. A common entry point for IT professionals moving toward Microsoft security and compliance roles.
What's on the exam
SC-900 Skills Measured (as of November 7, 2025)
Describe the concepts of security, compliance, and identity
10–15%Shared responsibility model · Defense in depth · Zero trust methodology · Encryption and hashing concepts · Governance, risk, and compliance basics
Describe the capabilities of Microsoft Entra
25–30%Microsoft Entra ID identity types · Authentication and MFA · Conditional access · Identity governance and protection · Hybrid and external identities
Describe the capabilities of Microsoft security solutions
35–40%Microsoft Defender for Cloud · Microsoft Sentinel (SIEM/SOAR) · Microsoft Defender XDR · Network and endpoint protection · Azure security capabilities
Describe the capabilities of Microsoft compliance solutions
20–25%Microsoft Purview compliance · Data classification and protection · Insider risk and eDiscovery · Compliance Manager and score · Service Trust Portal
Frequently asked questions
How much does the Microsoft SC-900 cost?
The Microsoft SC-900 costs $99. US list price; varies by country.
How long is the Microsoft SC-900 and how many questions does it have?
40–60 items — Approximately 60 minutes.
What do you need to pass the Microsoft SC-900?
700 on a scale of 1000.
Can you retake the Microsoft SC-900?
24-hour wait after first fail; longer waits for subsequent attempts.
What is the best way to study for the Microsoft SC-900?
Study the official blueprint, not random material: the exam is weighted by domain (Describe the concepts of security, compliance, and identity 10–15%, Describe the capabilities of Microsoft Entra 25–30%, Describe the capabilities of Microsoft security solutions 35–40%, Describe the capabilities of Microsoft compliance solutions 20–25%). Spaced-repetition flashcards built domain-by-domain against that blueprint are the most time-efficient way to cover everything the exam tests.
Program in development
We're building a blueprint-complete program for this exam. Meanwhile, explore live programs across 11 exam.
Explore programs →