SC-900

Microsoft Security, Compliance, and Identity Fundamentals practice questions

Original questions written from the published exam objectives, never recalled exam content, with an explanation that teaches the concept behind every answer. Why that matters.

Exam code
SC-900
Cost
$99 USD
Questions
40-60
Duration
45 minutes
Passing score
700 (scale 1-1000)
Format
Multiple choice, drag-and-drop, and hot area

The SC-900 exam costs $99. Fail it and the retake is another $99. Practicing until you are ready is the cheapest part of this.

Exam domains and official weightings

From the official Microsoft Learn study guides. Put your study time where the weight is.

4domains
  • Describe concepts of security, compliance, and identity12%
  • Describe capabilities of Microsoft Entra28%
  • Describe capabilities of Microsoft security solutions38%
  • Describe capabilities of Microsoft compliance solutions22%
  • Describe concepts of security, compliance, and identity12%
  • Describe capabilities of Microsoft Entra28%
  • Describe capabilities of Microsoft security solutions38%
  • Describe capabilities of Microsoft compliance solutions22%

Try 5 free sample questions

No account needed. Every question includes our three-tier explanation: the concept, why the answer follows, and why each wrong option is wrong.

Sample question 1 of 5

Describe concepts of security, compliance, and identityEasy

Which three guiding principles define Microsoft's Zero Trust model?

Sample question 2 of 5

Describe capabilities of Microsoft EntraModerate

A company wants passwordless sign-in where users approve a number-matching prompt in a mobile app. Which Microsoft Entra authentication method is this?

Sample question 3 of 5

Describe capabilities of Microsoft EntraModerate

An automation script running in Azure needs to authenticate to other Azure services without any stored credentials. Which Entra identity type is designed for this?

Sample question 4 of 5

Describe capabilities of Microsoft security solutionsModerate

Which Microsoft service is a cloud-native SIEM and SOAR that collects security data at scale, detects threats with analytics, and automates responses with playbooks?

Sample question 5 of 5

Describe capabilities of Microsoft compliance solutionsModerate

A compliance team wants to discover, classify, and label sensitive information (like credit card numbers) across Microsoft 365, applying protection based on the labels. Which solution family provides this?

Full SCI Fundamentals question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

An honest study plan

  1. 1. Read the official objectives first

    Download the official objectives from Microsoft Azure and skim every line. The exam can only test what’s listed there, it’s the contract.

  2. 2. Weight your study toward Describe capabilities of Microsoft security solutions and Describe capabilities of Microsoft Entra

    Together the top two domains are 66% of the exam. Practice them until your accuracy is consistently above 80%.

  3. 3. Drill weak domains, then take a mock exam

    Use Domain Drill on your weakest areas, then a full timed mock at real length (40-60 questions, 45 minutes). Book the real exam when you’re consistently passing mocks, not before.

Official free resources

Study from the source. These are Microsoft Azure’s own materials:

Official SCI Fundamentals exam page & objectives ↗

Where SCI Fundamentals fits

Related certifications

Frequently asked questions

Who should take SC-900?

Anyone starting in security or identity on the Microsoft stack, it maps out Entra ID, Defender XDR, Sentinel, and Purview without requiring hands-on depth. It's also a strong primer before SC-300.

Is SC-900 harder than AZ-900?

They're comparable in difficulty; SC-900 simply covers different territory. If you already work with identity (Entra ID, Conditional Access), SC-900 may actually feel easier.

What's on the SC-900 exam?

Four skill areas: security/compliance/identity concepts (~12%), Microsoft Entra capabilities (~28%), Microsoft security solutions (~38%), and Microsoft compliance solutions (~22%), per Microsoft's published ranges.

Ready to practice for SC-900?

Play the free samples now. The full question bank is in progress, and you can join the waitlist on any sample question.