Microsoft SC-900 Certification Preparation: Security, Compliance and Identity
This one-day course gives you a clear picture of how Microsoft approaches security, compliance and identity. You will see how Entra, Defender, Sentinel and Purview fit together, then practise with SC-900 style questions. No prior security experience is needed to follow along.
The essentials
Publisher : Microsoft
Certification : Microsoft Certified: Security, Compliance, and Identity Fundamentals
Exam code : SC-900
Duration : 1 day (7 h)
Level : Beginner
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Typically 40–60 questions · 45 min · passing score 700
Exam voucher: included or optional depending on the package — contact us.
Explain shared responsibility, defence in depth and the Zero Trust model
Tell apart authentication, authorization, federation and hybrid identity
Describe Microsoft Entra Conditional Access, MFA and identity governance features
Place Defender XDR, Defender for Cloud and Microsoft Sentinel within a protection strategy
Outline Microsoft Purview compliance tools: labels, DLP, retention and eDiscovery
Walk into the SC-900 exam with a clear method and good pacing
Program
Security, compliance and identity concepts (10–15%)
Shared responsibility, defence in depth, Zero Trust
Encryption, hashing and GRC basics
Identity as the perimeter, identity providers, directories and federation
Microsoft Entra (25–30%)
Identity types in Entra ID, including workload identities
Authentication methods, MFA and password protection
Conditional Access, roles and RBAC
ID Governance, access reviews, PIM and ID Protection
Microsoft security solutions (35–40%)
DDoS Protection, Azure Firewall, WAF, NSGs, Bastion and Key Vault
Defender for Cloud and posture management (CSPM)
SIEM and SOAR with Microsoft Sentinel
Defender XDR services and the Microsoft Defender portal
Microsoft compliance solutions (20–25%)
Service Trust Portal and privacy principles
Compliance Manager and compliance score
Classification, sensitivity labels, DLP and records management
Insider risk, eDiscovery and audit
Prerequisites
General understanding of networking and cloud computing
Some experience working in an IT environment
A general idea of what Azure and Microsoft 365 offer
Target audience
Students and career changers moving into cybersecurity
IT, support staff and project managers working with Microsoft 365 or Azure
Business, compliance or procurement staff who need to understand Microsoft's security offering
The exam
The SC-900 exam lasts 45 minutes and usually contains 40 to 60 questions in several formats (multiple choice, drag and drop, hot area). You sit it through Pearson VUE, at a test centre or online with a remote proctor, and need a score of 700 to pass. It is available in English, French and several other languages. Fundamentals certifications do not expire, so no renewal is needed. Microsoft has announced an update to the English version on 21 October 2026, and we align the course with the current study guide.
Preparation tips
Take the free practice assessment on Microsoft Learn before and after the course
Learn what each product is for rather than where its menus are: the exam tests understanding
Check the weightings: security solutions carry the most marks
Frequently asked questions (FAQ)
Is SC-900 hard?
It is an entry-level exam. With a day of training and a few practice sets, most people with some IT background are well prepared.
Does the SC-900 certification expire?
No. Microsoft Fundamentals certifications stay valid with no renewal required.
Can I take the exam in French?
Yes, French is one of the languages Microsoft offers for SC-900, alongside English.
Do I need coding or Azure admin skills?
No. Basic networking and cloud knowledge is enough, and no scripting is required.
What comes after SC-900?
It depends on your role: SC-200 for SOC work, SC-300 for identity, SC-401 for data protection or SC-500 for cloud security.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a Microsoft training partner. Microsoft, Azure, Microsoft Entra, Microsoft Defender, Microsoft Sentinel and Microsoft Purview are trademarks of Microsoft.