Microsoft SC-900 Certification Study

Learning path

Microsoft SC-900 Certification Study

All articles · English

0 of 18 read 0%

Introduction15 min read

SC-900: the starting point for security, compliance, and identity

Understand the Microsoft Security, Compliance, and Identity Fundamentals certification, study seventeen complete chapters, including Microsoft Security Copilot, Microsoft Defender XDR, the Service Trust Portal, Microsoft privacy principles, Microsoft Purview compliance, data governance, Data Map, and Unified Catalog, and prepare with six practice tests.

Chapter 148 min read

Foundations of Security, Compliance, and Cloud Responsibility

Shared responsibility, defense in depth, the CIA triad, Zero Trust, cryptography, hashing, GRC, and data residency, sovereignty, and privacy.

Chapter 250 min read

Identity as the New Security Perimeter

Authentication, authorization, human, device, workload and agent identities, identity providers, tokens, claims, SSO, AD DS, Microsoft Entra ID, and federation.

Chapter 348 min read

Microsoft Entra ID, Identity Types, and Hybrid Environments

Tenant, directory, users, groups, devices, applications, service principals, workload identities, managed identities, Agent ID, hybrid identity, Connect Sync, Cloud Sync, PHS, PTA, federation, External ID, B2B, and B2C/CIAM.

Chapter 438 min read

Secure Authentication, MFA, and Passwordless Technologies

Authentication factors, MFA, Microsoft Authenticator, OATH, hardware tokens, Windows Hello for Business, FIDO2, passkeys, biometrics, Temporary Access Pass, security defaults, SSPR, password writeback, password protection, and smart lockout.

Chapter 540 min read

Conditional Access, RBAC, and Secure Resource Access

Conditional Access, Zero Trust signals, assignments, conditions, grant and session controls, RBAC, Microsoft Entra roles, Azure RBAC, scopes, least privilege, Global Secure Access, Microsoft Entra Internet Access, and Private Access.

Chapter 637 min read

Identity Governance, Privileged Access, and Identity Protection

Microsoft Entra ID Governance, the Joiner-Mover-Leaver cycle, Lifecycle Workflows, access reviews, entitlement management, access packages, Privileged Identity Management, Just-in-Time access, Microsoft Entra ID Protection, Verified ID, and Microsoft Security Copilot.

Chapter 742 min read

Microsoft Security Copilot and AI-Assisted Security

Generative AI, prompts, sessions, plugins, workspaces, agents, orchestration, prompt processing, onboarding, SCUs, permissions, privacy, and responsible AI.

Chapter 836 min read

Protecting Networks, Applications, and Secrets in Azure

Azure Virtual Network, NSGs, Azure Firewall, Web Application Firewall, Azure DDoS Protection, Azure Bastion, Key Vault, Security Copilot integrations, and defense in depth.

Chapter 938 min read

Cloud Security Posture and Workload Protection

Microsoft Defender for Cloud, CNAPP, CSPM, CWPP, Secure Score, recommendations, AI security, multicloud protection, Defender plans, and DevSecOps.

Chapter 1040 min read

Microsoft Sentinel, SIEM, SOAR, and Incident Response

SIEM and SOAR, analytics tier, data lake, graph, hosted MCP server, connectors, KQL, Fusion, incidents, hunting, automation, Security Copilot, and autonomous agents.

Chapter 1130 min read

Microsoft Defender XDR, Incidents, and the Unified Portal

Cross-domain correlation, the relationship among events, alerts, incidents, and evidence, attack story, multistage incidents, Automated Investigation and Response, Action center, advanced hunting, KQL, custom detections, and unified operations.

Chapter 1233 min read

Microsoft Defender Product Ecosystem

Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Safe Links, Safe Attachments, EDR, CASB, Shadow IT, SSPM, app governance, and XDR integration.

Chapter 1352 min read

Vulnerabilities, Threat Intelligence, and Exposure Management

Defender Vulnerability Management, Exposure Score, Microsoft Threat Intelligence, IOCs, IOAs, TTPs, Security Exposure Management, Enterprise Exposure Graph, attack paths, choke points, blast radius, and Security Copilot.

Chapter 1421 min read

Trust, Privacy, and the Service Trust Portal

Microsoft privacy principles, Service Trust Portal, audit reports, SOC, ISO, GDPR, restricted documents, Microsoft Purview portal, Compliance Manager, compliance score, and shared responsibility.

Chapter 1556 min read

Data Security and Protection with Microsoft Purview

Information Protection, sensitive information types, trainable classifiers, Content Explorer, Activity Explorer, sensitivity labels, DLP, Insider Risk Management, Adaptive Protection, DSPM, and Data Security Investigations.

Chapter 1648 min read

Compliance, Retention, Auditing, and Investigations

Compliance Manager, Communication Compliance, Information Barriers, retention policies and labels, Records Management, eDiscovery, legal holds, review sets, and Microsoft Purview Audit.

Chapter 1723 min read

Data Governance and Discovery with Microsoft Purview

Data governance, roles, metadata, Data Map, registration, scans, ingestion, classification, lineage, quality, Unified Catalog, governance domains, data products, glossary terms, CDEs, OKRs, discovery, and access.

CertificateComplete the track

Certificate of Completion

Finish every chapter to unlock your track completion certificate and download it as PDF, PNG or JPG.

Get certificate

SC-900 practice test60 min

Practice Test 01 - Microsoft SC-900

Timed test with 60 questions on security, compliance, and identity.

60 questions1 hour

Open practice test

SC-900 practice test60 min

Practice Test 02 - Microsoft SC-900

Timed test with 60 questions on security, compliance, and identity.

60 questions1 hour

Open practice test

SC-900 practice test60 min

Practice Test 03 - Microsoft SC-900

Timed test with 60 questions on security, compliance, and identity.

60 questions1 hour

Open practice test

SC-900 practice test60 min

Practice Test 04 - Microsoft SC-900

Timed test with 60 questions on security, compliance, and identity.

60 questions1 hour

Open practice test

SC-900 practice test60 min

Practice Test 05 - Microsoft SC-900

Timed test with 60 questions on security, compliance, and identity.

60 questions1 hour

Open practice test

SC-900 practice test60 min

Practice Test 06 - Microsoft SC-900

Timed test with 60 questions on security, compliance, and identity.

60 questions1 hour

Open practice test