Certification Overview
The Security, Compliance, and Identity Fundamentals certification requires
one exam:
-
- SC-900 – Microsoft Security, Compliance, and Identity Fundamentals

This exam validates foundational-level knowledge of security, compliance, and identity concepts within Microsoft environments.
Track Details & Exam Requirements
With SC-900, you demonstrate your ability to:
- Understand core cybersecurity principles
- Describe Microsoft identity and access management solutions
- Explain compliance and data governance concepts
- Identify Microsoft security solutions across cloud services
- Understand zero trust security principles
Exam Focus Areas
The SC-900 exam covers:
🔹 Security Concepts
- Shared responsibility model
- Defense-in-depth
- Zero Trust model
- Encryption and data protection
🔹 Identity & Access Management
- Microsoft Entra ID (Azure AD)
- Authentication and authorization
- Multi-factor authentication (MFA)
- Conditional access
🔹 Microsoft Security Solutions
- Microsoft Defender
- Microsoft Sentinel (SIEM)
- Threat protection solutions
🔹 Compliance Solutions
- Microsoft Purview
- Data governance
- Insider risk management
- Compliance management tools
Validity & Recertification
The SC-900 certification
does not expire (based on Microsoft’s current policy for fundamentals-level certifications).
Recommended Experience
There are
no formal prerequisites.
However, it is helpful to have:
- Basic IT knowledge
- General understanding of networking concepts
- Interest in cybersecurity and compliance
Who Should Pursue SC-900?
- Students and beginners in cybersecurity
- Business stakeholders working with Microsoft security solutions
- IT professionals transitioning into security roles
- Compliance and risk professionals
- Career changers entering cybersecurity
Career Benefits
- Builds a strong cybersecurity foundation
- Enhances credibility in security and compliance environments
- Prepares you for advanced Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)
- Opens pathways toward security analyst and identity roles