Microsoft certification practice
Practise Microsoft Security, Compliance, and Identity Fundamentals SC-900 across all 4 official exam domains — Describe the capabilities of Microsoft Entra, Describe the capabilities of Microsoft security solutions, Describe the capabilities of Microsoft compliance solutions, Describe the concepts of security, compliance, and identity — with original exam-style questions, full explanations, and wrong-answer analysis. Microsoft certification exams often test whether you can choose the right Azure, Microsoft 365, identity, security or monitoring action for a realistic administrative scenario. Courseiva helps you practise with structured questions and explanations.
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
New here? Start with this
Recommended: 25-question diagnostic
Covers all 4 domains · takes ~5 min · no account needed · shows your weak areas immediately
Key facts for the Microsoft Security, Compliance, and Identity Fundamentals SC-900 exam.
Exam cost
$165 USD / ~£135
Duration
45 minutes
Question count
40–60 questions
Passing score
700 / 1000
Validity
Lifetime (no expiry)
Delivered by
Pearson VUE
Online proctored
Yes — available
Retake policy
100% free — no account required
Everything on Courseiva for SC-900 is free — no subscription, no trial, no email wall.
Courseiva provides free Microsoft Security, Compliance, and Identity Fundamentals SC-900 (SC-900) practice questions with original exam-style questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics. Courseiva is an independent platform and is not affiliated with Microsoft.
24 hours after first failure; 14 days after second
Question formats
Microsoft Security, Compliance, and Identity Fundamentals (SC-900) validates foundational understanding of security, compliance, and identity concepts and how Microsoft addresses them across Azure, Microsoft 365, and Microsoft Defender. It is non-technical and suitable for any role.
Official prerequisite
None
Recommended experience
Familiarity with Microsoft 365 or Azure is helpful
No technical prerequisites.
Should you skip this exam?
If you are a security professional, Security+ (SY0-701) or SC-200 are more relevant. SC-900 is for people new to the security domain.
Courseiva study tip
Focus on Microsoft Defender products (Defender for Cloud, Defender XDR) and Microsoft Purview compliance tools — these are Microsoft-specific and commonly tested.
UK salary range
£30,000–£55,000
US salary range
$50,000–$85,000
Job roles that cite SC-900
What certification to take next
$165 USD.
700 out of 1000.
No. SC-900 is a lifetime certification with no expiry.
SC-900 is one of Microsoft's easiest exams — comparable to AZ-900 in difficulty. Most candidates pass with 15–30 hours of study using Microsoft Learn's free SC-900 path.
SC-900 is Microsoft-focused and non-technical — it tests awareness of Microsoft security products. Security+ (SY0-701) is vendor-neutral, more technical, and far more impactful for security careers.
See how SC-900 stacks up against related certifications.
Courseiva Exam Intelligence
Data confidence: BuildingDerived from Courseiva's continuously updated practice dataset: 1,250 exam-style questions. Updated 2 July 2026.
Question difficulty mix
Average time per question: 96s
4
Exam domains
official blueprint domains covered by the bank
1,250
Questions
exam-style questions in the SC-900 bank
Practice modes
Choose a mode that matches your current study phase. Use topic practice early on and mock exams closer to your exam date.
All SC-900 Questions
Browse the full question bank organised by domain and difficulty.
Practice Test
Start a 20-question session with a full explanation after each answer.
Mock Exam
Simulate the real exam with a timed, full-length question set.
Quick 25
A 25-question warm-up — ideal for a short daily study session.
Flashcards
Reinforce key terms, commands, and protocol facts with flashcards.
Domain Practice
Focus exclusively on one exam domain to target your weakest area.
50-Question Set
Mid-length practice set covering all domains.
Exam guide
Start with a short practice session, review each missed answer, then return to the topics that caused mistakes.
Microsoft Security, Compliance, and Identity Fundamentals SC-900 spans 4 official exam domains (Describe the capabilities of Microsoft Entra, Describe the capabilities of Microsoft security solutions, Describe the capabilities of Microsoft compliance solutions, and more). Questions test whether you can apply each objective in a realistic scenario, not just recall a definition.
Related practice questions
Use these internal links to move from the exam guide into focused topic practice pages.
Practise SC-900 questions linked to Describe the capabilities of Microsoft Entra.
Practise SC-900 questions linked to Describe the capabilities of Microsoft security solutions.
Practise SC-900 questions linked to Describe the capabilities of Microsoft compliance solutions.
Practise SC-900 questions linked to Describe the concepts of security, compliance, and identity.
Practise SC-900 questions linked to SC-900 fundamentals.
Practise SC-900 questions linked to SC-900 scenario.
Practise SC-900 questions linked to SC-900 troubleshooting.
Practice directory
Every practice set is a unique selection of questions — numbered tests, domain-focused sessions, and topic-specific quizzes.
Showing 8 of 76 tests. See all 76 SC-900 practice tests →
Official blueprint
Target weak areas by practising questions from a single domain. Each domain page shows all questions, difficulty breakdown, and a focused practice session.
Practise SC-900 questions in this domain →
Practise SC-900 questions in this domain →
Practise SC-900 questions in this domain →
Practise SC-900 questions in this domain →
Deep-dive questions
The most-searched SC-900 questions — each with a detailed explanation, worked example, and full answer breakdown.
Term reference
These terms appear frequently in SC-900 questions. Understanding them precisely reduces guessing and improves scores.
Safe Links
Safe Links is a Microsoft Defender for Office 365 feature that scans URLs in emails and documents in real time to protect users from malicious websites.
authorized_keys
A file on a server that stores the public keys of users who are allowed to log in without a password using SSH key-based authentication.
Reader role
A Reader role is a predefined set of permissions in identity and governance systems that allows a user to view resources and data but not create, modify, or delete anything.
Security pillar
The Security pillar is a set of best practices for designing and operating cloud systems that protect data, systems, and assets through confidentiality, integrity, and availability controls.
Guest user
A guest user is a temporary or limited-access account that allows someone to use a system, network, or application without full user privileges and often without a permanent identity.
Extensible Authentication Protocol
Extensible Authentication Protocol (EAP) is a flexible authentication framework used in network access control, particularly in wireless and point-to-point connections, that supports multiple authentication methods without requiring changes to the underlying protocol.
Baseline configuration
A baseline configuration is a documented set of specifications for hardware, software, and settings that serves as a consistent starting point for systems in an IT environment.
Common Criteria
Common Criteria is an international standard (ISO 15408) that provides a common framework for evaluating the security features and capabilities of information technology products.
Learn the concepts
103 book-style chapters cover every SC-900 objective in plain English. Read the theory here, then test it with practice questions.
Chapter 1
Core Security Concepts
25 min read
Chapter 2
Identity Concepts
25 min read
Chapter 3
Compliance Concepts
25 min read
Chapter 4
Microsoft Entra ID
25 min read
Chapter 5
Authentication and MFA in Entra
25 min read
Chapter 6
Conditional Access Policies
25 min read
Chapter 7
Entra ID Roles and RBAC
25 min read
Chapter 8
Microsoft Entra Identity Protection
25 min read
Free study guide
The Courseiva SC-900 study guide covers exam format, the official domain blueprint with weights, a structured study plan, and domain-specific tips for each section. Use it alongside practice questions to build both conceptual depth and exam confidence.
Sample questions
Original exam-style questions — not copied from any exam or dump site. Open a question for the full answer breakdown.
A company wants to allow its partners to access a specific SharePoint Online site using their own corporate credentials. The company does not want to manage partner accounts. Which…
Refer to the exhibit. The JSON snippet shows an app registration in Microsoft Entra ID. The password credential endDateTime is set to 2025-12-31. What will happen when that date is…
Which TWO of the following are capabilities of Microsoft Purview Information Protection?
Your organization uses Microsoft Purview Communication Compliance to detect harassing messages. You receive an alert for a message that appears to be a joke between colleagues. Wha…
Refer to the exhibit. An administrator creates a Conditional Access policy in Microsoft Entra ID. What will this policy do?
A multinational corporation must comply with regulations that require them to keep financial records for 7 years and then permanently delete them. However, they are currently invol…
Related certifications
Studying for SC-900? These related Microsoft certifications share concepts and are common next steps.
Microsoft Security Operations Analyst
SC-200 · 1,200 practice questions
Azure Administrator
AZ-104 · 1,049 practice questions
Microsoft Azure AI Fundamentals
AI-900 · 985 practice questions
Azure Fundamentals
AZ-900 · 981 practice questions
Azure AI Engineer Associate
AI-102 · 945 practice questions
Microsoft 365 Endpoint Administrator
MD-102 · 942 practice questions
Official booking and top-rated study resources for the SC-900.
Ways to study SC-900