SC-900 Cheat Sheet

#	Domain	Weight	Questions	Practice
1.0	Describe the concepts of security, compliance, and identity	13%	243	Practice →
Total	13%	1,467

Domain

Weight

Questions

Practice

1.0

Describe the concepts of security, compliance, and identity

13%

243

Practice →

Total

13%

1,467

Domain Quick Reference

1.0Describe the concepts of security, compliance, and identity

Distinguish authentication from authorization, apply Zero Trust's verify explicitly, least privilege, assume breach, and classify data with Microsoft Purview sensitivity labels and data loss prevention policies.

13%

Key concepts

✓Differentiate authentication, authorization, and the roles of Microsoft Entra ID in identity management
✓Identify Zero Trust principles: verify explicitly, use least privilege access, assume breach
✓Recognise Microsoft Purview capabilities including data classification, sensitivity labels, and DLP policies
✓Describe encryption types, data residency, and shared responsibility model in Microsoft cloud

Watch out for

⚠Confusing authentication (proving identity) with authorization (granting access permissions), leading to wrong service selection in scenario questions
⚠Assuming Microsoft Entra ID is a full replacement for on-premises Active Directory rather than a cloud identity and access management service
⚠Mixing up Microsoft Purview compliance portal features with Microsoft Defender security portal capabilities when answering governance questions

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'

→Flag uncertain questions and come back — don't waste time on one question.

→Eliminate obviously wrong options first, then choose between remaining ones.

→Trust your first instinct unless you have a specific reason to change.

→For SC-900, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

#	Domain	Weight	Questions	Practice
1.0	Describe the concepts of security, compliance, and identity	13%	243	Practice →
Total	13%	1,467

Domain

Weight

Questions

Practice

1.0

Describe the concepts of security, compliance, and identity

13%

243

Practice →

Total

13%

1,467

Domain Quick Reference

1.0Describe the concepts of security, compliance, and identity

13%

Key concepts

✓Differentiate authentication, authorization, and the roles of Microsoft Entra ID in identity management
✓Identify Zero Trust principles: verify explicitly, use least privilege access, assume breach
✓Recognise Microsoft Purview capabilities including data classification, sensitivity labels, and DLP policies
✓Describe encryption types, data residency, and shared responsibility model in Microsoft cloud

Watch out for

⚠Confusing authentication (proving identity) with authorization (granting access permissions), leading to wrong service selection in scenario questions
⚠Assuming Microsoft Entra ID is a full replacement for on-premises Active Directory rather than a cloud identity and access management service
⚠Mixing up Microsoft Purview compliance portal features with Microsoft Defender security portal capabilities when answering governance questions

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'

→Flag uncertain questions and come back — don't waste time on one question.

→Eliminate obviously wrong options first, then choose between remaining ones.

→Trust your first instinct unless you have a specific reason to change.

→For SC-900, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

SC-900 Exam Blueprint — At a Glance

Domain Quick Reference

1.0Describe the concepts of security, compliance, and identity

Exam Day Reminders

More SC-900 resources

SC-900 Cheat Sheet

SC-900 Exam Blueprint — At a Glance

Domain Quick Reference

1.0Describe the concepts of security, compliance, and identity

Exam Day Reminders

More SC-900 resources