Microsoft Security, Compliance, and Identity Fundamentals (SC-900) · EXAM GUIDEReviewed 2026-11-03
Selected foundations; all 58 retained official leaves remain partial. Additional evidence is not a full-outline or calibrated simulation claim.
SC-900: Exam Guide & Official Sources
Use 14 lessons, 64 original formal tasks, 42 retrieval cards and 4 independent guides for selected foundations. Editorial durations are uncalibrated.
Current official scope and learning boundary
The retained official study guide lists skills measured as of October21,2026 in four domains. This course selects foundational decisions across14 groups; inspect all58 leaf rows and their remaining gaps.
- Coverage and formal item counts do not establish complete official-objective coverage.
- Professional educator review pending; learner trial not_run; formal release HOLD.
How to use the14-day plan
Daily minutes are editorial study estimates. Read, attempt, explain and retrieve; a completion record is activity evidence rather than a mastery score.
- Try Worked example and Transfer check before reading their check basis.
- Attempt formal tasks and clinic checks before opening explanations.
- Return after a delay to any uncertain condition or scope distinction.
Day1: Security models and data-protection goals
Choose security controls by ownership, protection goal and the failure they must withstand.
Security models and data-protection goals
50 suggested minutes
- Read Security models and data-protection goals and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Security models and data-protection goals for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day2: Identity proof, permissions, and federation
Separate identity proof, identity-provider relationships and application permissions.
Identity proof, permissions, and federation
50 suggested minutes
- Read Identity proof, permissions, and federation and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards. Read the linked independent clinic and attempt both application checks before expanding their answers.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Identity proof, permissions, and federation for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day3: Entra identity types and hybrid identity
Identify the subject represented by an identity, then distinguish hybrid lifecycle from alignment.
Entra identity types and hybrid identity
50 suggested minutes
- Read Entra identity types and hybrid identity and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Entra identity types and hybrid identity for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day4: Authentication methods and multifactor evidence
Judge factor evidence from the actual configuration and select password recovery by its prerequisites.
Authentication methods and multifactor evidence
50 suggested minutes
- Read Authentication methods and multifactor evidence and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Authentication methods and multifactor evidence for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Authentication vs. authorization - Microsoft identity platform | Microsoft LearnMicrosoft Entra multifactor authentication overview - Microsoft Entra ID | Microsoft LearnPasskeys (FIDO2) authentication method in Microsoft Entra ID - Microsoft Entra ID | Microsoft LearnSelf-service password reset deep dive - Microsoft Entra ID | Microsoft Learn
Day5: Conditional Access and role scope
Separate conditions on a sign-in request from permission to act, and distinguish directory administration from Azure-resource role scope.
Conditional Access and role scope
50 suggested minutes
- Read Conditional Access and role scope and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Conditional Access and role scope for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Authentication vs. authorization - Microsoft identity platform | Microsoft LearnMicrosoft Entra Conditional Access: Zero Trust Policy Engine - Microsoft Entra ID | Microsoft LearnMicrosoft Entra multifactor authentication overview - Microsoft Entra ID | Microsoft LearnAzure roles, Microsoft Entra roles, and classic subscription administrator roles | Microsoft Learn
Day6: Identity governance and risk decisions
Match continued-access review, temporary privilege and identity-risk investigation to different decisions.
Identity governance and risk decisions
50 suggested minutes
- Read Identity governance and risk decisions and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Identity governance and risk decisions for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
What are access reviews? - Microsoft Entra - Microsoft Entra ID Governance | Microsoft LearnMicrosoft Entra Conditional Access: Zero Trust Policy Engine - Microsoft Entra ID | Microsoft LearnMicrosoft Entra ID Governance - Microsoft Entra ID Governance | Microsoft LearnWhat is Microsoft Entra ID Protection? - Microsoft Entra ID Protection | Microsoft LearnWhat is Privileged Identity Management? - Microsoft Entra ID Governance | Microsoft Learn
Day7: Infrastructure security by protection purpose
Choose infrastructure protection by traffic criteria, administrative connectivity or secret-management purpose.
Infrastructure security by protection purpose
50 suggested minutes
- Read Infrastructure security by protection purpose and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Infrastructure security by protection purpose for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day8: Cloud posture and workload protection
Distinguish posture assessment, development security and running-workload protection.
Cloud posture and workload protection
50 suggested minutes
- Read Cloud posture and workload protection and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Cloud posture and workload protection for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day9: Sentinel detection, investigation, and response
Trace security operations from source ingestion to analysis, investigation and response.
Sentinel detection, investigation, and response
50 suggested minutes
- Read Sentinel detection, investigation, and response and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Sentinel detection, investigation, and response for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day10: Defender XDR and protection scopes
Choose Defender protection by asset/signal scope and distinguish component evidence from joined incidents.
Defender XDR and protection scopes
50 suggested minutes
- Read Defender XDR and protection scopes and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards. Read the linked independent clinic and attempt both application checks before expanding their answers.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Defender XDR and protection scopes for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day11: Provider trust evidence and privacy principles
Separate provider assurance, customer control evidence and high-level privacy principles.
Provider trust evidence and privacy principles
50 suggested minutes
- Read Provider trust evidence and privacy principles and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Provider trust evidence and privacy principles for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
What are access reviews? - Microsoft Entra - Microsoft Entra ID Governance | Microsoft LearnPrivacy and data management overview - Microsoft Service Assurance | Microsoft LearnGet started with the Microsoft Service Trust Portal | Microsoft LearnShared responsibility in the cloud - Microsoft Azure | Microsoft Learn
Day12: Purview Compliance Manager and score limits
Manage improvement work while keeping compliance scores separate from customer-control validation.
Purview Compliance Manager and score limits
50 suggested minutes
- Read Purview Compliance Manager and score limits and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Purview Compliance Manager and score limits for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day13: Classification, protection, and retention
Separate classification/protection, sharing controls and information lifecycle settings.
Classification, protection, and retention
50 suggested minutes
- Read Classification, protection, and retention and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards. Read the linked independent clinic and attempt both application checks before expanding their answers.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Classification, protection, and retention for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
Day14: Insider risk, eDiscovery, and audit purposes
Match investigation tools to activity history, responsive content or potential insider-risk signals.
Insider risk, eDiscovery, and audit purposes
50 suggested minutes
- Read Insider risk, eDiscovery, and audit purposes and work through its separate teaching example.
- Attempt the distinct Transfer check, then the linked formal questions before feedback. Name the controlling requirement and the closest alternative.
- Retrieve the three linked single-target cards.
Completion: Record a reasoned decision for each task in this unit, including the requirement that distinguishes the strongest alternative; completing activities does not establish mastery.
If you need another pass: Return to Insider risk, eDiscovery, and audit purposes for the uncertain concept. Re-state its protected object, evidence or scope; write a corrected comparison and retry the linked task after a delay.
The syllabus and your next lesson.
Security models and data-protection goals
- Choose security controls by ownership, protection goal and the failure they must withstand.
Identity proof, permissions, and federation
- Separate identity proof, identity-provider relationships and application permissions.
Entra identity types and hybrid identity
- Identify the subject represented by an identity, then distinguish hybrid lifecycle from alignment.
Authentication methods and multifactor evidence
- Judge factor evidence from the actual configuration and select password recovery by its prerequisites.
Authentication vs. authorization - Microsoft identity platform | Microsoft LearnMicrosoft Entra multifactor authentication overview - Microsoft Entra ID | Microsoft LearnPasskeys (FIDO2) authentication method in Microsoft Entra ID - Microsoft Entra ID | Microsoft LearnSelf-service password reset deep dive - Microsoft Entra ID | Microsoft Learn
Conditional Access and role scope
- Separate conditions on a sign-in request from permission to act, and distinguish directory administration from Azure-resource role scope.
Authentication vs. authorization - Microsoft identity platform | Microsoft LearnMicrosoft Entra Conditional Access: Zero Trust Policy Engine - Microsoft Entra ID | Microsoft LearnMicrosoft Entra multifactor authentication overview - Microsoft Entra ID | Microsoft LearnAzure roles, Microsoft Entra roles, and classic subscription administrator roles | Microsoft Learn
Identity governance and risk decisions
- Match continued-access review, temporary privilege and identity-risk investigation to different decisions.
What are access reviews? - Microsoft Entra - Microsoft Entra ID Governance | Microsoft LearnMicrosoft Entra Conditional Access: Zero Trust Policy Engine - Microsoft Entra ID | Microsoft LearnMicrosoft Entra ID Governance - Microsoft Entra ID Governance | Microsoft LearnWhat is Microsoft Entra ID Protection? - Microsoft Entra ID Protection | Microsoft LearnWhat is Privileged Identity Management? - Microsoft Entra ID Governance | Microsoft Learn
Infrastructure security by protection purpose
- Choose infrastructure protection by traffic criteria, administrative connectivity or secret-management purpose.
Cloud posture and workload protection
- Distinguish posture assessment, development security and running-workload protection.
Sentinel detection, investigation, and response
- Trace security operations from source ingestion to analysis, investigation and response.
Defender XDR and protection scopes
- Choose Defender protection by asset/signal scope and distinguish component evidence from joined incidents.
Provider trust evidence and privacy principles
- Separate provider assurance, customer control evidence and high-level privacy principles.
What are access reviews? - Microsoft Entra - Microsoft Entra ID Governance | Microsoft LearnPrivacy and data management overview - Microsoft Service Assurance | Microsoft LearnGet started with the Microsoft Service Trust Portal | Microsoft LearnShared responsibility in the cloud - Microsoft Azure | Microsoft Learn
Purview Compliance Manager and score limits
- Manage improvement work while keeping compliance scores separate from customer-control validation.
Classification, protection, and retention
- Separate classification/protection, sharing controls and information lifecycle settings.
Insider risk, eDiscovery, and audit purposes
- Match investigation tools to activity history, responsive content or potential insider-risk signals.
Linked lessons cover selected foundations. Use the official syllabus to plan any topics beyond this pilot.
Dates and scheduling
Appointments
No live appointment availability was checked; use the current official credential page for scheduling.
Fees and regional differences
Payable exam amount
No checkout or final payable amount was verified; use the current official scheduling/pricing flow.
Book with the exam provider.
- 01
Use the official exam page
Review current official credential and scheduling information before booking; this course does not operate an account or appointment flow.
OpenExam does not accept exam registrations or payments.
Make a final check.
0 of 1 checked · for this visit
Official resources.
Current skills scope, broader than this foundation course.
Current certification and scheduling entry.
Eight existing course questions selected by the common worksheet preview selector; not a full study-guide PDF or an official simulation. S6 generates the PDF for the accepted final candidate.
64 original formal tasks; related-concept reinforcement is included and is not 64 independent competencies.
14 lessons, 42 retrieval cards and 4 independent guides support selected foundations; every retained official leaf remains partial.
The 14-day route links real learning objects; the short worksheet reuses 8 tasks.
No official/recalled exam items, score prediction or provider/tenant deployment certification.
Professional review pending; representative learner trial not_run; release HOLD.
Exam names belong to their respective owners. OpenExam is an independent learning project.