SC-900 prep: Microsoft Security, Compliance, Identity

Our take

Exam Overview & Details • Exam Code: SC-900 • Target Audience: Business stakeholders, students, and new or existing IT professionals wanting to understand Microsoft SCI solutions. • Cost: Typically $99 USD (varies by region/country). • Prerequisites: None required, though basic familiarity with Microsoft Azure and Microsoft 365 is recommended. • Language Accommodations: Extra time is available if the exam is not offered in your native language. Core Exam Domains & Weighting • Describe security and compliance concepts (10–15%) • Shared Responsibility Model: How security duties split between the cloud provider and the customer across IaaS, PaaS, and SaaS (customers always retain data, device, and identity ownership). • Defense in Depth: Layered security approaches (physical, identity, perimeter, network, compute, application, and data). • Zero Trust Model: Core principles of "never trust, always verify", explicit verification, least privilege access, and assume breach. • CIA Triad: Confidentiality, integrity, and availability. • Encryption vs. Hashing: Symmetric and asymmetric encryption versus irreversible one-way hashing for passwords. • Governance, Risk, and Compliance (GRC): Managing organizational policies, risk assessment, and regulatory frameworks. • Describe the capabilities of Microsoft Entra (25–30%) • Microsoft Entra ID (formerly Azure AD): Identity types, directory services, and hybrid identity capabilities. • Authentication & Access Management: Multi-factor authentication (MFA), self-service password reset (SSPR), conditional access, and role-based access control (RBAC). • Identity Protection & Governance: Privileged Identity Management (PIM) and identity reviews. • Describe the capabilities of Microsoft security solutions • Azure Infrastructure Security: Core Azure network security, firewalls, and security management tools. • Microsoft Defender XDR: Threat protection across endpoints, email, identity, and cloud apps. • Microsoft Sentinel: Cloud-native SIEM and SOAR capabilities for threat detection and response. • Describe the capabilities of Microsoft compliance solutions • Microsoft Purview: Information protection, data lifecycle management, data governance, and insider risk. • Privacy Principles & Service Trust Portal: Data residency, sovereignty, and compliance offerings. Recommended Study Resources • Official Training: Free self-paced learning paths on Microsoft Learn. • Practice Assessments: Free practice tests available directly on the Microsoft Learn SC-900 page. • Documentation & Community: Microsoft Security Documentation and the Microsoft Q&A community forums. If you'd like, tell me: • What is your current IT or cloud background? • Which specific domain (Entra, Defender, Purview, or general concepts) feels the hardest for you right now?

Best for: all level learners who want one guided path through IT Certifications. Skip it if: You already work professionally in IT Certifications and need advanced architecture patterns.

📘 What you will learn

• Describe the concepts of security, compliance, and identity
• Describe the capabilities of Microsoft identity and access management solutions
• Describe the capabilities of Microsoft security solutions
• Describe the capabilities of Microsoft compliance solutions

📑 Course content

21 sections · 100 lectures · 6 hours of video · updated 11/2026

1. Getting started — 12 lectures · 0.7h
2. Core foundations — 17 lectures · 1h
3. Building real projects — 18 lectures · 1.1h
4. Intermediate techniques — 11 lectures · 0.6h
5. Deep dive & best practices — 16 lectures · 0.9h
6. Capstone project — 13 lectures · 0.8h
7. Next steps — 13 lectures · 0.9h

🎯 Who it is for

Suits: Complete beginners, career switchers, and self-taught devs who want structure.

Needs: You need to know how to use a computer, and hopefully know how to use a spreadsheet. No prior knowledge of Microsoft Azure or 365 is required. Also, no prior knowledge of security, compliance or identity is required. You can access Azure or Microsoft 365 Centers on Windows, iOS or Linux. There is a 30-day refund guarantee of this Udemy course (see Udemy's refund policy). Why not have a look at the curriculum below and see what you can learn?

👤 Instructor

Phillip Burton - over one million students so far — I Do Data is dedicated to creating video courses on Udemy in a variety of computer-related topics, such as SQL in its different dialects and Microsoft Office. Are you wanting to learn a new skill from the beginning? Or are you wanting to build on an existing skill? In either case, welcome. Our courses are available on Udemy at any time, so you can watch them whenever you like, as often as you like. For many of our courses, if you master the skills taught, you are able (if you wish) to take (and hopefully pass) the official certification offered by Microsoft, Tableau or other companies. That would look good on your CV or resume? It could make the difference between getting a promotion, or a more rewarding job. I Do Data courses are dedicated to enabling you to succeed.

❓ FAQ

These are the provider's aggregate ratings. The analysis above is written by CourseDepth — we do not publish invented student quotes.