SC-900 · COVERAGE & GAPSSC-900: Coverage Map & Learning Gaps
Selected foundations; all 58 retained official leaves remain partial. Additional evidence is not a full-outline or calibrated simulation claim.
shared responsibility model
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Operating-system versus data/access responsibility across IaaS/PaaS only. Coverage remains bounded; broader official objective details require further study.
defense-in-depth
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Independent control layers versus assurance about one layer. Coverage remains bounded; broader official objective details require further study.
Zero Trust model
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Verify explicitly/least privilege/assume breach principles only. Coverage remains bounded; broader official objective details require further study.
encryption and hashing
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Recoverable confidentiality versus integrity digest; no algorithms/key operations. Coverage remains bounded; broader official objective details require further study.
Governance, Risk, and Compliance (GRC) concepts
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
identity as the primary security perimeter
Partial practice2 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
authentication
Partial practice2 linked question families · 3 variants. Variants are not separate syllabus objectives.
What still needs work
- Selected identity-proof distinction; not all protocols/methods. Coverage remains bounded; broader official objective details require further study.
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
authorization
Partial practice3 linked question families · 5 variants. Variants are not separate syllabus objectives.
What still needs work
- Action/target permissions separate from identity reuse. Coverage remains bounded; broader official objective details require further study.
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
identity providers
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- IdP purpose and shared authentication experience only. Coverage remains bounded; broader official objective details require further study.
concept of directory services and Active Directory
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
concept of federation
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Partner identity trust versus synchronization/application permission only. Coverage remains bounded; broader official objective details require further study.
Microsoft Entra ID
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
types of identities, including workload identities
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Human/workload/device subject distinctions; no exhaustive identity-type administration. Coverage remains bounded; broader official objective details require further study.
hybrid identity
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Common on-premises/cloud identity, provisioning lifecycle and alignment only. Coverage remains bounded; broader official objective details require further study.
authentication methods
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Specified passkey configuration and unknown passwordless method evidence; not all methods. Coverage remains bounded; broader official objective details require further study.
multifactor authentication (MFA)
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Factor categories versus prompts/secrets and specified passkey conditions. Coverage remains bounded; broader official objective details require further study.
password protection and management capabilities
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Configured SSPR recovery; Password Protection appears as a supported adjacent alternative, not a full administration lesson. Coverage remains bounded; broader official objective details require further study.
Microsoft Entra Conditional Access
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Signal-based MFA conditions distinct from permissions; no policy deployment. Coverage remains bounded; broader official objective details require further study.
Microsoft Entra roles and role-based access control (RBAC)
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Directory roles versus Azure-resource scope; no role catalog/elevation procedure. Coverage remains bounded; broader official objective details require further study.
Microsoft Entra ID Governance
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Lifecycle-event tasks and access-governance distinctions only. Coverage remains bounded; broader official objective details require further study.
access reviews
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Recurring continued-need decisions only; no deployment/licensing detail. Coverage remains bounded; broader official objective details require further study.
capabilities of Microsoft Entra Privileged Identity Management
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Eligible role activation, approval/time constraints; no administration procedure. Coverage remains bounded; broader official objective details require further study.
Microsoft Entra ID Protection
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Identity-risk detection/investigation; not a full risk-policy implementation. Coverage remains bounded; broader official objective details require further study.
Azure DDoS Protection
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- DDoS capability-to-network-availability purpose only. Coverage remains bounded; broader official objective details require further study.
Azure Firewall
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
Azure Web Application Firewall (WAF)
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Common web-request exploit protection purpose; no payloads/deployment. Coverage remains bounded; broader official objective details require further study.
network segmentation with Azure virtual networks
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
network security groups (NSGs)
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Basic stateful 5-tuple filtering only. Coverage remains bounded; broader official objective details require further study.
Azure Bastion
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Managed private-VM-address administrative connection purpose only. Coverage remains bounded; broader official objective details require further study.
Azure Key Vault
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Secret-storage purpose and distinction from network filtering; no key operations. Coverage remains bounded; broader official objective details require further study.
Microsoft Defender for Cloud
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- CSPM/CWPP/DevSecOps capability distinctions only. Coverage remains bounded; broader official objective details require further study.
Cloud Security Posture Management (CSPM)
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Configuration-posture assessment versus workload threats. Coverage remains bounded; broader official objective details require further study.
how security policies, standards, and recommendations improve the cloud security posture
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
enhanced security features provided by cloud workload protection
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Running-workload threat-protection purpose; no service/plan enumeration. Coverage remains bounded; broader official objective details require further study.
concepts of security information and event management (SIEM) and security orchestration automated response (SOAR)
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- SIEM event investigation versus SOAR workflow orchestration. Coverage remains bounded; broader official objective details require further study.
threat detection and mitigation capabilities in Microsoft Sentinel
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Selected connectors, analytics, hunting and orchestration distinctions; not all detection/mitigation features. Coverage remains bounded; broader official objective details require further study.
Microsoft Defender XDR services
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Focused components and XDR correlation of provisioned/licensed signals. Coverage remains bounded; broader official objective details require further study.
Microsoft Defender for Office 365
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Email/collaboration protection purpose only. Coverage remains bounded; broader official objective details require further study.
Microsoft Defender for Endpoint
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Endpoint platform versus joined incident correlation only. Coverage remains bounded; broader official objective details require further study.
Microsoft Defender for Cloud Apps
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Cross-SaaS visibility/data-control purpose only. Coverage remains bounded; broader official objective details require further study.
Microsoft Defender for Identity
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- On-premises AD signal scope versus Entra risk only. Coverage remains bounded; broader official objective details require further study.
Microsoft Defender Vulnerability Management
Partial practiceWhat still needs work
- Focused paragraph contrasts vulnerability prioritization with incident context; no dedicated formal task. Coverage remains bounded; broader official objective details require further study.
Microsoft Threat Intelligence
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
Microsoft Defender portal
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
Service Trust Portal offerings
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Provider audit material, access boundary and customer-evidence separation. Coverage remains bounded; broader official objective details require further study.
privacy principles of Microsoft
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Selected high-level commercial privacy principles; no legal interpretation. Coverage remains bounded; broader official objective details require further study.
Microsoft Purview portal
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
Compliance Manager
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Assessments/controls/action evidence workflow only. Coverage remains bounded; broader official objective details require further study.
uses and benefits of compliance score
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Progress/prioritization versus customer-control validation; no legal guarantee. Coverage remains bounded; broader official objective details require further study.
data classification capabilities
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
benefits of Content explorer and Activity explorer
Partial practice1 linked question families · 1 variants. Variants are not separate syllabus objectives.
What still needs work
- Bounded fictional cases only; not complete provider configuration, tenant verification or full objective mastery. Professional review pending; representative learner trial not_run.
sensitivity labels and sensitivity label policies
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Configured sensitivity purpose/coexistence; not full publication or automatic-label configuration. Coverage remains bounded; broader official objective details require further study.
data loss prevention (DLP)
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Sensitive-sharing-activity policy purpose only; not exhaustive supported locations. Coverage remains bounded; broader official objective details require further study.
records management
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Record declaration/lifecycle/disposition purpose; no record-type restriction or legal schedule. Coverage remains bounded; broader official objective details require further study.
retention policies, retention labels, and retention label policies
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Location/item scope and publication-versus-application distinction only. Coverage remains bounded; broader official objective details require further study.
insider risk management
Partial practice1 linked question families · 2 variants. Variants are not separate syllabus objectives.
What still needs work
- Potential-risk policy correlation and privacy boundary only. Coverage remains bounded; broader official objective details require further study.
eDiscovery solutions in Microsoft Purview
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Current eDiscovery case content/search/hold/export purposes; no premium workflow administration. Coverage remains bounded; broader official objective details require further study.
audit solutions in Microsoft Purview
Partial practice2 linked question families · 4 variants. Variants are not separate syllabus objectives.
What still needs work
- Recorded operation searches by actor/activity/date; no complete logging/retention promise. Coverage remains bounded; broader official objective details require further study.
