Microsoft SC-900 Exam Prep

What you will be able to do

• Explain zero trust, shared responsibility, and core security concepts
• Describe Microsoft Entra ID identity types, authentication, and Conditional Access
• Map Microsoft Defender and Sentinel capabilities to security scenarios
• Describe Microsoft Purview compliance, information protection, and governance
• Answer SC-900 style questions across all four official domains
• Pass a timed practice exam at or above the passing bar

What is inside

4 modules, 16 lessons. Each module ends in a graded quiz.

1. 01

   Security, Compliance, and Identity Concepts

   Covers the SC-900 domain Describe the concepts of security, compliance, and identity, worth 10 to 15 percent of the exam. You will master the shared responsibility model, defense in depth, the CIA triad, Zero Trust, encryption and hashing, GRC fundamentals, and the identity concepts the rest of the exam builds on. Every topic is taught with original scenarios and exam style knowledge checks.

   4 lessons · 15 quiz questions

2. 02

   Microsoft Entra Capabilities

   Covers the SC-900 domain Describe the capabilities of Microsoft Entra (25-30% of the exam), the second heaviest weighted domain on the test. You will learn what Microsoft Entra ID does, the identity types it manages, hybrid identity, authentication methods and MFA, Conditional Access, roles and RBAC, and the identity protection and governance stack: PIM, access reviews, entitlement management, and Microsoft Entra ID Protection.

   4 lessons · 15 quiz questions

3. 03

   Microsoft Security Solutions

   Covers the SC-900 domain Describe the capabilities of Microsoft security solutions (35-40% of the exam), the heaviest domain on the test. You will learn core Azure infrastructure security services (DDoS Protection, Azure Firewall, WAF, NSGs, Bastion, Key Vault), security posture management with Microsoft Defender for Cloud, SIEM and SOAR with Microsoft Sentinel, and the Microsoft Defender XDR family with its unified portal.

   4 lessons · 15 quiz questions

4. 04

   Microsoft Compliance Solutions

   Covers the SC-900 domain Describe the capabilities of Microsoft compliance solutions, worth 20 to 25 percent of the exam. You will learn where Microsoft publishes its own compliance evidence, how Compliance Manager and compliance score measure your posture, how Microsoft Purview classifies and protects data through labels, DLP, and retention, and how insider risk management, eDiscovery, and audit handle risk and investigations.

   4 lessons · 15 quiz questions