CertifyDeckCargando contenido…
Microsoft · security
SC-900 validates security, compliance and identity fundamentals: Zero Trust and defense in depth, the capabilities of Microsoft Entra, Azure infrastructure security, Microsoft Defender for Cloud, Microsoft Sentinel and Defender XDR, and the compliance solutions in Microsoft Purview.
No registration · No credit card
Question bank updated on October 4, 2026
A manufacturer buys cyber insurance so that an insurer covers the financial losses of a possible ransomware attack. Which risk response is this?
Your progress
A timed 45-minute simulation, weighted by domain.
Practice domain by domain, with no time pressure.
The official syllabus organized with summaries and progress tracking.
The CertifyDeck SC-900 practice test includes 326+ original exam questions written from the official Microsoft Certified: Security, Compliance, and Identity Fundamentals skills outline, each with the correct answer explained and available in English and Spanish.
Practice by domain with a free online test, take a timed 45-minute mock exam weighted like the real test and review your mistakes. Start for free, no sign-up or credit card, and try the practice test before deciding.
Official weighting per domain. Start for free, no sign-up.
Built for business stakeholders, new or existing IT professionals and students who want to understand how Microsoft's security, compliance and identity solutions fit together. General familiarity with Azure and Microsoft 365 helps.
SC-900 checks that you understand the fundamentals of security, compliance and identity and how Microsoft's solutions address them: Microsoft Entra, Defender, Sentinel and Purview. It is a concepts exam, aimed both at technical profiles starting out and at business stakeholders.
The outline has four blocks: security, compliance and identity concepts (10–15%), Microsoft Entra capabilities (25–30%), Microsoft security solutions (35–40%) and Microsoft compliance solutions (20–25%). It lasts 45 minutes.
Zero Trust, defense in depth and the shared responsibility model are the base. For identity: identity types, authentication methods, MFA, Conditional Access, roles, Privileged Identity Management and ID Protection. For security: Azure Firewall, DDoS Protection, network security groups, Azure Bastion, Key Vault, Microsoft Defender for Cloud, Microsoft Sentinel and the Defender XDR family.
For compliance: the Service Trust Portal, Compliance Manager, sensitivity labels, data loss prevention, retention, insider risk management, eDiscovery and audit in Microsoft Purview. The hard part is not mixing up products with similar names and knowing which one solves each need.
With Microsoft 365 or Azure experience, one to two weeks is usually enough; without it, three or four. Start with a diagnostic test, spend more time on the security solutions block, which is the largest, and review your mistakes by domain.
The English outline is updated on 21 October 2026 with minor changes; our bank already follows that version. If you then want to specialize in identity, the next step is [SC-300](/certifications/sc-300).
Official source: study guide SC-900 on Microsoft Learn
CertifyDeck is an independent study platform and is not affiliated with, endorsed by, or sponsored by Microsoft. SC-900 and its related marks belong to their respective owner.
It is a fundamentals exam and needs no hands-on experience, but it covers many products. The hardest part is telling apart what each Defender, Entra and Purview solution does.
45 minutes, according to Microsoft's official page. The passing score is 700 out of 1000.
The English version is updated on 21 October 2026 with minor changes to the Microsoft Entra ID identity types and Defender XDR sections. Other languages are updated about eight weeks later.
Yes. You can start free, with no credit card, and read the explanation for each question before deciding whether you need full access.
No. They are original questions based on Microsoft's public objectives and documentation; we do not use leaked exam content.
Microsoft sets the price per country. USD 99 list price (varies by country; confirm on Pearson VUE when booking). CertifyDeck does not sell the exam, only the preparation: you can start for free and full access is a one-off fee per certification.
You need a scaled score of 700 out of 1000. The scale does not map to a fixed percentage of correct answers, so aim for consistent results above 80% on unseen mock exams before booking.
Yes. Microsoft offers SC-900 in Spanish as well as English. On CertifyDeck every question, option and explanation is available in both languages, keeping the official English terminology.
It is a good free starting point, but it is short and repeats the same items. A practice test with hundreds of original Microsoft Certified: Security, Compliance, and Identity Fundamentals questions, timed mock exams and practice by domain tells you where you fail and whether you keep the level under time pressure.
Start free, no card
