Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals — Information & Free Practice

The authority publishes percentage ranges for each content area. The practice percentages below use the midpoint of each range, normalized to 100%; they are not exact percentages published by the authority. Practice question counts may differ slightly because of rounding.

• Describe the concepts of security, compliance, and identity — Official range: 10–15% (Practice allocation: 12.5%)

  • Describe security and compliance concepts
  • Define identity concepts
• Describe the capabilities of Microsoft Entra — Official range: 25–30% (Practice allocation: 27.5%)

  • Describe function and identity types of Microsoft Entra ID
  • Describe authentication capabilities of Microsoft Entra ID
  • Describe access management capabilities of Microsoft Entra ID
  • Describe identity protection and governance capabilities of Microsoft Entra
• Describe the capabilities of Microsoft security solutions — Official range: 35–40% (Practice allocation: 37.5%)

  • Describe core infrastructure security services in Azure
  • Describe security management capabilities of Azure
  • Describe capabilities of Microsoft Sentinel
  • Describe threat protection with Microsoft Defender XDR
• Describe the capabilities of Microsoft compliance solutions — Official range: 20–25% (Practice allocation: 22.5%)

  • Describe Microsoft Service Trust Portal and privacy principles
  • Describe compliance management capabilities of Microsoft Purview
  • Describe information protection, data lifecycle management, and data governance capabilities of Microsoft Purview
  • Describe insider risk, eDiscovery, and audit capabilities in Microsoft Purview