- Worth 10 to 15% of SC-900, with 11 skills in the study guide. We teach and practice each one
- Describe the shared responsibility model
- Describe defense-in-depth
- Describe the Zero Trust model
- Describe encryption and hashing
- Describe Governance, Risk, and Compliance (GRC) concepts
- Define identity as the primary security perimeter
- Define authentication
- Define authorization
- Describe identity providers
- Describe the concept of directory services and Active Directory
- Describe the concept of federation
Microsoft Certification Training Course
Security, Compliance, and Identity Fundamentals (SC-900) Certification Training Course
We'll get you ready for Exam SC-900, Microsoft's entry level credential for security, compliance and identity.
Course focus: Security, compliance and identity concepts plus what Microsoft Entra, Defender, Sentinel and Purview do, mapped to the SC-900 study guide.
Course Overview
What the SC-900 course covers and who it's for.
Per Microsoft, SC-900 covers the fundamentals of security, compliance and identity across cloud based and related Microsoft services. It's a good first step before SC-200, SC-300 or SC-401.
Microsoft security solutions are 35 to 40% of the exam, so Defender and Sentinel get the most class time. We also cover Entra ID, Zero Trust and Purview compliance tools.
Microsoft says SC-900 is for business stakeholders, new or existing IT professionals and students. You should be familiar with Azure and Microsoft 365 and want to understand how Microsoft security, compliance and identity tools work together across them.
SC-900 gives you the words and the map. After it you know what Entra, Defender, Sentinel and Purview each do, which makes every security conversation and every associate level security exam easier.
Accumentum is an independent training provider. We aren't a Microsoft partner and this isn't official Microsoft training. Microsoft sets exam content, prices and policies, so check learn.microsoft.com before you book.
Course Objectives
Get ready for SC-900 the way the exam is built.
01
Cover the Whole Study Guide
Work through all 4 skill areas in Microsoft's SC-900 study guide, weighted the way the exam weights them.
02
Go Deep on the Biggest Domain
Describe the capabilities of Microsoft security solutions is 35 to 40% of the exam per Microsoft, so it gets the most class time.
03
Practice Hands-On
Work through the tasks the SC-900 study guide lists, hands on.
04
Master Describe the concepts of security, compliance, and identity
Microsoft lists 11 skills here, worth 10 to 15%. We practice all of them, from the first, describe the shared responsibility model, through the last, describe the concept of federation.
05
Master Describe the capabilities of Microsoft Entra
Microsoft lists 12 skills here, worth 25 to 30%. We practice all of them, from the first, describe Microsoft Entra ID, through the last, describe Microsoft Entra ID Protection.
06
Master Describe the capabilities of Microsoft security solutions
Microsoft lists 21 skills here, worth 35 to 40%. We practice all of them, from the first, describe Azure DDoS Protection, through the last, describe the Microsoft Defender portal.
07
Master Describe the capabilities of Microsoft compliance solutions
Microsoft lists 14 skills here, worth 20 to 25%. We practice all of them, from the first, describe the Service Trust Portal offerings, through the last, describe audit solutions in Microsoft Purview.
08
Be Ready for Test Day
We practice the question styles Microsoft uses and walk through how scheduling, scoring and renewal work.
Who Should Attend
- Students and career changers moving into security.
- IT staff who work alongside security teams.
- Business and compliance staff who need the vocabulary.
- Anyone heading for SC-200, SC-300 or SC-401.
Prerequisites
- Microsoft doesn't require another certification first, and we don't have enrollment prerequisites either.
- Some general IT or cloud knowledge helps.
Pathway Map
The SC-900 course in 4 modules.
Each module is one skill area from the official study guide, with its exam weight.
Course Content
- Worth 25 to 30% of SC-900, with 12 skills in the study guide. We teach and practice each one
- Describe Microsoft Entra ID
- Describe types of identities, including workload identities
- Describe hybrid identity
- Describe the authentication methods
- Describe multifactor authentication (MFA)
- Describe password protection and management capabilities
- Describe Microsoft Entra Conditional Access
- Describe Microsoft Entra roles and role-based access control (RBAC)
- Describe Microsoft Entra ID Governance
- Describe access reviews
- Describe the capabilities of Microsoft Entra Privileged Identity Management
- Describe Microsoft Entra ID Protection
- Worth 35 to 40% of SC-900, with 21 skills in the study guide. We teach and practice each one
- Describe Azure DDoS Protection
- Describe Azure Firewall
- Describe Azure Web Application Firewall (WAF)
- Describe network segmentation with Azure virtual networks
- Describe network security groups (NSGs)
- Describe Azure Bastion
- Describe Azure Key Vault
- Describe Microsoft Defender for Cloud
- Describe Cloud Security Posture Management (CSPM)
- Describe how security policies, standards, and recommendations improve the cloud security posture
- Describe enhanced security features provided by cloud workload protection
- Define the concepts of security information and event management (SIEM) and security orchestration automated response (SOAR)
- Describe threat detection and mitigation capabilities in Microsoft Sentinel
- Describe Microsoft Defender XDR services
- Describe Microsoft Defender for Office 365
- Describe Microsoft Defender for Endpoint
- Describe Microsoft Defender for Cloud Apps
- Describe Microsoft Defender for Identity
- Describe Microsoft Defender Vulnerability Management
- Describe Microsoft Threat Intelligence
- Describe the Microsoft Defender portal
- Worth 20 to 25% of SC-900, with 14 skills in the study guide. We teach and practice each one
- Describe the Service Trust Portal offerings
- Describe the privacy principles of Microsoft
- Describe the Microsoft Purview portal
- Describe Compliance Manager
- Describe the uses and benefits of compliance score
- Describe the data classification capabilities
- Describe the benefits of Content explorer and Activity explorer
- Describe sensitivity labels and sensitivity label policies
- Describe data loss prevention (DLP)
- Describe records management
- Describe retention policies, retention labels, and retention label policies
- Describe insider risk management
- Describe eDiscovery solutions in Microsoft Purview
- Describe audit solutions in Microsoft Purview
Course Features
How we teach SC-900.
Instructor-Led Classes
Live instruction with time for questions, so you aren't figuring out the hard parts alone.
Hands-On Practice
Practice on the tasks in the SC-900 study guide.
Study Guide Mapping
Every module maps to a skill area in Microsoft's SC-900 study guide.
Exam Strategy
Practice questions plus tips on scheduling, timing and what to expect on test day.
Certification Exam
About the SC-900 exam.
SC-900 Exam Readiness
Our students pass at a 98.8% rate across Accumentum courses. We'll get you ready for SC-900 the same way.
Per Microsoft, SC-900 is the exam for Microsoft Certified: Security, Compliance, and Identity Fundamentals. Microsoft lists 45 minutes of exam time for fundamentals exams like this one. You need a score of 700 or greater to pass. Microsoft sets the price by country and shows it on the exam page.
Full details are on the official certification page and the SC-900 study guide.
Accumentum is an independent training provider. We aren't a Microsoft partner and this isn't official Microsoft training. Microsoft sets exam content, prices and policies, so check learn.microsoft.com before you book.
Inside the Course
A closer look at each SC-900 domain.
The course opens with the ideas every security role uses. Zero Trust, shared responsibility, defense in depth, encryption, and the difference between authentication and authorization. Microsoft also covers its privacy principles here, so non-technical staff get real value from day one.
Next comes Microsoft Entra. You'll learn identity types, hybrid identity, multifactor authentication, Conditional Access, Privileged Identity Management and identity protection. Identity is where most attacks start, which is why this domain gets so much attention.
Then you'll move to Microsoft's security tools. Microsoft Defender, Microsoft Sentinel for threat detection, and Microsoft Threat Intelligence. The goal is to know what each tool does and when it shows up, so alerts and reports make sense later.
The last domain is compliance with Microsoft Purview. Sensitivity labels, data loss prevention, retention, records management, insider risk, eDiscovery and audit. We connect each one to a real business problem so the names stick.
Many students take SC-900 as a first step and come back for SC-200, SC-300 or SC-401. We'll help you pick the right next exam based on the job you want.
Because SC-900 is a concepts exam, we teach with examples instead of long lists. A stolen password shows why multifactor authentication matters. A shared file with the wrong people shows why labels and DLP exist. A noisy alert queue shows why a SIEM helps. Stories like these make the terms easy to remember on test day.
Study Plan
A study plan for SC-900 built from the study guide.
Time follows Microsoft's domain weights, so you study what the exam asks most.
Step 1: Describe the concepts of security, compliance, and identity
Spend about 15% of your study time here. First, describe the shared responsibility model. Then define identity as the primary security perimeter. Last, describe the concept of federation.
Step 2: Describe the capabilities of Microsoft Entra
Spend about 30% of your study time here. First, describe Microsoft Entra ID. Then describe Microsoft Entra Conditional Access. Last, describe Microsoft Entra ID Protection.
Step 3: Describe the capabilities of Microsoft security solutions
Spend about 40% of your study time here. First, describe Azure DDoS Protection. Then describe enhanced security features provided by cloud workload protection. Last, describe the Microsoft Defender portal.
Step 4: Describe the capabilities of Microsoft compliance solutions
Spend about 25% of your study time here. First, describe the Service Trust Portal offerings. Then describe sensitivity labels and sensitivity label policies. Last, describe audit solutions in Microsoft Purview.
Step 5: Review and book
Take Microsoft's free practice assessment, review the domains you scored lowest in, and book the exam once you're scoring well.
Official Resources
Where to check SC-900 facts on Microsoft Learn.
Microsoft changes exams often. These are the pages we teach from.
Microsoft Certified: Security, Compliance, and Identity Fundamentals certification page
Requirements, renewal and the skills Microsoft expects.
SC-900 study guide
Every skill measured, with domain weights and change notes.
SC-900 exam page
Price for your country, scheduling, languages and the exam sandbox.
Exam Domains
How Microsoft weights the SC-900 exam.
From the official SC-900 study guide. Bigger domains get more questions.
Describe the concepts of security, compliance, and identity
10 to 15% of the exam. 11 skills listed by Microsoft.
Describe the capabilities of Microsoft Entra
25 to 30% of the exam. 12 skills listed by Microsoft.
Describe the capabilities of Microsoft security solutions
35 to 40% of the exam. 21 skills listed by Microsoft.
Describe the capabilities of Microsoft compliance solutions
20 to 25% of the exam. 14 skills listed by Microsoft.
Exam and Course Format
What test day and class look like for SC-900.
SC-900 is a fundamentals level exam. Microsoft lists 45 minutes of exam time for fundamentals exams like this one. Microsoft scores exams from 1 to 1000 and you need 700 or greater to pass.
You can book SC-900 through the exam page on Microsoft Learn, where Microsoft shows the price for your country and the delivery options it offers. Microsoft also has a free exam sandbox there so you can see the question layout before test day.
Our course runs instructor-led. We teach each domain in study guide order, practice the tasks, and finish with review on the areas you miss most.
Career Paths
Where SC-900 fits in your career.
Entry level SOC or security analyst
Know which tool raises an alert and where to look next.
IT support moving into security
Understand identity and access problems before escalating them.
Compliance and risk staff
Talk to IT about Purview, retention and eDiscovery with confidence.
Students and career changers
Show employers a verified start in Microsoft security.
Funding and PathPay
Ways to pay for SC-900 training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're a soldier or airman, ask us whether Army Credentialing Assistance or Air Force COOL can fund this course for you.
PathPay lets you spread tuition into monthly payments instead of paying it all up front. You can see the plans on the PathPay page or ask us which plan fits this course.
Employers often pay for Microsoft training too. Ask us for a quote or invoice your company can use.
See PathPay plans, Army Credentialing Assistance training and Air Force COOL training.
Related Courses
Courses that pair well with SC-900.
Frequently Asked Questions
Common questions about our SC-900 course.
SC-900 is the exam for Microsoft Certified: Security, Compliance, and Identity Fundamentals, a fundamentals level credential. Details are on the official page at https://learn.microsoft.com/en-us/credentials/certifications/security-compliance-and-identity-fundamentals/
No. We're an independent training provider and we aren't a Microsoft partner. Our course follows Microsoft's public study guide. Microsoft offers free self-paced training on Microsoft Learn too.
Microsoft sets the price by country and shows it on the exam page when you pick your location. Check it there before you book.
Microsoft lists 45 minutes of exam time for fundamentals exams like this one. A score of 700 or greater is needed to pass.
Fundamentals certifications don't expire. Associate, expert and specialty certifications are valid for one year and you renew for free online on Microsoft Learn.
Microsoft doesn't require another certification first, and we don't have enrollment prerequisites either. Some general IT or cloud knowledge helps.
Instructor-led, with hands-on practice and exam prep. Ask us about upcoming class dates.
It's a fundamentals exam, so it tests concepts, not hands-on admin skill. People new to security still need to study the four domains in the study guide.
Microsoft Entra, Microsoft Defender, Microsoft Sentinel and Microsoft Purview, plus core concepts like Zero Trust, shared responsibility and encryption.
No. Microsoft doesn't require it. It's a good warm up if security is new to you.
Yes. Microsoft names business stakeholders as one of the audiences for this exam.
It depends on your background. People new to IT need more time on the concepts domain, while IT staff often move faster.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're a soldier or airman, ask us whether Army Credentialing Assistance or Air Force COOL can fund this course for you.
PathPay lets you spread tuition into monthly payments instead of paying it all up front. You can see the plans on the PathPay page or ask us which plan fits this course.
Use the registration page linked below, or email info@accumentum.net and we'll follow up with dates and next steps.
Enrollment
Enroll in SC-900 training with Accumentum.
Enroll in our SC-900 course to get ready for the Security, Compliance, and Identity Fundamentals exam with instructor-led classes and hands-on practice.
For dates and next steps, use the registration page linked below or email info@accumentum.net.
Ready to start on SC-900?
Tell us your target date and we'll help you plan the path.