Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Microsoft
Exam Format
45 min
40-60
700
Fundamentals
Registration
$99 USD
Pearson VUE or online proctoring
English, Japanese, Chinese (Simplified), Korean +9 more
Validity
Does not expire
Fundamental certifications do not require renewal; Can progress to role-based certifications
SC-900 Exam Topics and Domains
SC-900 is organized into 4 weighted domains. Expect to work with Microsoft Entra ID, Microsoft Purview, Microsoft Defender for Cloud, Active Directory, and more.
1
Describe the concepts of security, compliance, and identity
12.5%
Describe security and compliance concepts
Describe the shared responsibility modelDescribe defense-in-depthDescribe the Zero Trust modelDescribe encryption and hashingDescribe Governance, Risk, and Compliance (GRC) concepts
- Understand fundamental security concepts
- Explain compliance and governance principles
- Describe modern security models
Define identity concepts
Define identity as the primary security perimeterDefine authenticationDefine authorizationDescribe identity providersDescribe the concept of directory services and Active DirectoryDescribe the concept of federation
- Understand core identity concepts
- Differentiate authentication and authorization
- Explain modern identity architectures
2
Describe the capabilities of Microsoft Entra
27.5%
Describe function and identity types of Microsoft Entra ID
Describe Microsoft Entra IDDescribe types of identitiesDescribe hybrid identity
- Understand Microsoft Entra ID capabilities
- Identify different identity types
- Explain hybrid identity scenarios
Describe authentication capabilities of Microsoft Entra ID
Describe the authentication methodsDescribe multi-factor authentication (MFA)Describe password protection and management capabilities
- Understand authentication methods in Entra ID
- Explain MFA implementation
- Describe password management features
Describe access management capabilities of Microsoft Entra ID
Describe Conditional AccessDescribe Microsoft Entra roles and role-based access control (RBAC)
- Understand Conditional Access
- Explain RBAC in Entra ID
- Describe access management strategies
Describe identity protection and governance capabilities of Microsoft Entra
Describe Microsoft Entra ID GovernanceDescribe access reviewsDescribe the capabilities of Microsoft Entra Privileged Identity ManagementDescribe Microsoft Entra ID Protection
- Understand identity governance
- Explain privileged access management
- Describe identity protection features
3
Describe the capabilities of Microsoft security solutions
37.5%
Describe core infrastructure security services in Azure
Describe Azure distributed denial-of-service (DDoS) ProtectionDescribe Azure FirewallDescribe Web Application Firewall (WAF)Describe network segmentation with Azure virtual networksDescribe network security groups (NSGs)Describe Azure BastionDescribe Azure Key Vault
- Understand Azure infrastructure security services
- Explain network security capabilities
- Describe secure access methods
Describe security management capabilities of Azure
Describe Microsoft Defender for CloudDescribe Cloud Security Posture Management (CSPM)Describe how security policies and initiatives improve the cloud security postureDescribe enhanced security features provided by cloud workload protection
- Understand cloud security management
- Explain CSPM capabilities
- Describe workload protection features
Describe capabilities of Microsoft Sentinel
Define the concepts of security information and event management (SIEM) and security orchestration automated response (SOAR)Describe threat detection and mitigation capabilities in Microsoft Sentinel
- Understand SIEM and SOAR concepts
- Explain Sentinel capabilities
- Describe threat detection and response
Describe threat protection with Microsoft Defender XDR
Describe Microsoft Defender XDR servicesDescribe Microsoft Defender for Office 365Describe Microsoft Defender for EndpointDescribe Microsoft Defender for Cloud AppsDescribe Microsoft Defender for IdentityDescribe Microsoft Defender Vulnerability ManagementDescribe Microsoft Defender Threat Intelligence (Defender TI)Describe the Microsoft Defender portal
- Understand Microsoft Defender XDR ecosystem
- Explain individual Defender products
- Describe unified threat protection
4
Describe the capabilities of Microsoft compliance solutions
22.5%
Describe Microsoft Service Trust Portal and privacy principles
Describe the Service Trust Portal offeringsDescribe the privacy principles of MicrosoftDescribe Microsoft Priva
- Understand Service Trust Portal
- Explain Microsoft privacy principles
- Describe privacy management tools
Describe compliance management capabilities of Microsoft Purview
Describe the Microsoft Purview portalDescribe Compliance ManagerDescribe the uses and benefits of compliance score
- Understand Purview portal
- Explain Compliance Manager
- Describe compliance scoring
Describe information protection, data lifecycle management, and data governance capabilities of Microsoft Purview
Describe the data classification capabilitiesDescribe the benefits of Content explorer and Activity explorerDescribe sensitivity labels and sensitivity label policiesDescribe data loss prevention (DLP)Describe records managementDescribe retention policies, retention labels, and retention label policies
- Understand information protection
- Explain data lifecycle management
- Describe governance capabilities
Describe insider risk, eDiscovery, and audit capabilities in Microsoft Purview
Describe insider risk managementDescribe eDiscovery solutions in Microsoft PurviewDescribe audit solutions in Microsoft Purview
- Understand insider risk management
- Explain eDiscovery process
- Describe audit capabilities
How do I earn this certification?
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for SC-900.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2025-07-18
- Announcement date: 2025-07-18
Updates
- Microsoft Entra ID Current Product rebranding from Azure AD to Microsoft Entra ID • Release date: 2023-07-11
- Microsoft Defender XDR Current Unified portal and expanded threat protection capabilities • Release date: 2024-04-01
- Microsoft Security Copilot GA New AI-assisted security capabilities mentioned in Sentinel topics • Release date: 2024-04-01
- Microsoft Purview Current Enhanced compliance and data governance features • Release date: Ongoing updates
Who should take this exam?
This exam is typically taken by Business stakeholders and New IT professionals.
- Familiarity with Microsoft Azure
- Familiarity with Microsoft 365
- Understanding of cloud computing concepts
- Basic understanding of networking and computing concepts