Search...

Quick Feedback

Back to Security, Compliance, and Identity Fundamentals (SC-900)

Security, Compliance, and Identity Fundamentals (SC-900) Study Guide

Domain-by-domain study guide for Microsoft Security, Compliance, and Identity Fundamentals (SC-900). Covers all 4 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

60 min

Questions

Exam Code

SC-900

Domains

Quick Navigation

Jump to a specific exam domain

1. Describe the concepts of security, compliance, and identity (13%)
2. Describe the capabilities of Microsoft Entra (28%)
3. Describe the capabilities of Microsoft security solutions (37%)
4. Describe the capabilities of Microsoft compliance solutions (22%)

Domain 1

13%

Describe the concepts of security, compliance, and identity

Understand core security, compliance, and identity concepts and principles

Topics to Master

Zero Trust model and principles
Shared responsibility model
Defense in depth
Common security threats and mitigation
Encryption and hashing concepts
Authentication vs authorization
Compliance concepts and regulations

Domain 2

28%

Describe the capabilities of Microsoft Entra

Understand Microsoft Entra ID authentication, identity governance, and access management

Topics to Master

Microsoft Entra ID (Azure AD) basics
Authentication methods: MFA, SSPR, FIDO2
Conditional Access policies
Microsoft Entra ID Protection
Privileged Identity Management (PIM)
Entitlement management and access reviews
External identities: B2B and B2C

Domain 3

37%

Describe the capabilities of Microsoft security solutions

Understand Microsoft security products for endpoint, cloud, and network protection

Topics to Master

Azure DDoS Protection and Azure Firewall
Web Application Firewall (WAF)
Microsoft Defender for Cloud: CSPM and CWPP
Microsoft Defender XDR: Endpoint, Office 365, Identity, Cloud Apps
Microsoft Sentinel: SIEM and SOAR
Azure Key Vault
Microsoft Security Copilot

Domain 4

22%

Describe the capabilities of Microsoft compliance solutions

Understand Microsoft Purview compliance tools and governance solutions

Topics to Master

Microsoft Purview compliance portal
Sensitivity labels and label policies
Data Loss Prevention (DLP)
Insider Risk Management
eDiscovery and audit logs
Compliance Manager and compliance score
Microsoft Service Trust Portal

Continue Your Prep

Free CertStud resources for SC-900

Study Notes Exam Study Plan Start Practice Test

Back to Security, Compliance, and Identity Fundamentals (SC-900)

Security, Compliance, and Identity Fundamentals (SC-900) Study Guide

Domain-by-domain study guide for Microsoft Security, Compliance, and Identity Fundamentals (SC-900). Covers all 4 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

60 min

Questions

Exam Code

SC-900

Domains

Quick Navigation

Jump to a specific exam domain

1. Describe the concepts of security, compliance, and identity (13%)
2. Describe the capabilities of Microsoft Entra (28%)
3. Describe the capabilities of Microsoft security solutions (37%)
4. Describe the capabilities of Microsoft compliance solutions (22%)

Domain 1

13%

Describe the concepts of security, compliance, and identity

Understand core security, compliance, and identity concepts and principles

Topics to Master

Zero Trust model and principles
Shared responsibility model
Defense in depth
Common security threats and mitigation
Encryption and hashing concepts
Authentication vs authorization
Compliance concepts and regulations

Domain 2

28%

Describe the capabilities of Microsoft Entra

Understand Microsoft Entra ID authentication, identity governance, and access management

Topics to Master

Microsoft Entra ID (Azure AD) basics
Authentication methods: MFA, SSPR, FIDO2
Conditional Access policies
Microsoft Entra ID Protection
Privileged Identity Management (PIM)
Entitlement management and access reviews
External identities: B2B and B2C

Domain 3

37%

Describe the capabilities of Microsoft security solutions

Understand Microsoft security products for endpoint, cloud, and network protection

Topics to Master

Azure DDoS Protection and Azure Firewall
Web Application Firewall (WAF)
Microsoft Defender for Cloud: CSPM and CWPP
Microsoft Defender XDR: Endpoint, Office 365, Identity, Cloud Apps
Microsoft Sentinel: SIEM and SOAR
Azure Key Vault
Microsoft Security Copilot

Domain 4

22%

Describe the capabilities of Microsoft compliance solutions

Understand Microsoft Purview compliance tools and governance solutions

Topics to Master

Microsoft Purview compliance portal
Sensitivity labels and label policies
Data Loss Prevention (DLP)
Insider Risk Management
eDiscovery and audit logs
Compliance Manager and compliance score
Microsoft Service Trust Portal

Continue Your Prep

Free CertStud resources for SC-900

Study Notes Exam Study Plan Start Practice Test