Microsoft · Official Blueprint · Last reviewed May 2026
The official Microsoft SC-900 exam covers 4 domains. Domain weights tell you exactly how much of the exam each topic represents — and where to invest your study time.
Covers the topics, concepts, and applied skills examined under the Describe the concepts of security, compliance, and identity domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Describe the concepts of security, compliance, and identity questionsCovers the topics, concepts, and applied skills examined under the Describe the capabilities of Microsoft Entra domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Describe the capabilities of Microsoft Entra questionsCovers the topics, concepts, and applied skills examined under the Describe the capabilities of Microsoft security solutions domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Describe the capabilities of Microsoft security solutions questionsCovers the topics, concepts, and applied skills examined under the Describe the capabilities of Microsoft compliance solutions domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Describe the capabilities of Microsoft compliance solutions questionsThe heaviest domain on the SC-900 is "Describe the concepts of security, compliance, and identity" at null%. Start here and return to it regularly.
Allocate study time proportional to domain weight — a 25% domain deserves roughly 25% of your prep hours.
Never skip a low-weight domain. A 10% domain still represents 5–7 exam questions — enough to make the difference between pass and fail.
Use Courseiva domain analytics to track your accuracy per domain automatically. The system routes extra questions to your weak areas.
Courseiva tracks your accuracy per domain automatically and routes you toward your weakest areas — no manual configuration needed.
Security, Compliance & Identity
The SC-900 exam exists because security, compliance, and identity are not just features of Microsoft products: they are disciplines with their own principles, frameworks, and vocabulary.
Microsoft Security Solutions
Microsoft has built a sprawling security product portfolio across endpoints, identities, cloud workloads, and SIEM.