Microsoft Security, Compliance, and Identity Fundamentals (SC-900) Practice Exam
Microsoft Security, Compliance, and Identity Fundamentals (SC-900)
About Microsoft Security, Compliance, and Identity Fundamentals (SC-900) Exam
The Microsoft Security, Compliance, and Identity Fundamentals (SC-900) Exam is suitable for candidates looking to familiarize themselves with the fundamentals of security, compliance, and identity (SCI) across cloud-based and related Microsoft services.
The Microsoft Exam SC-900 measures your ability to describe concepts including security, compliance, and identity; capabilities of Microsoft identity and access management solutions; capabilities of Microsoft security solutions; and capabilities of Microsoft compliance solutions.
Who should take the exam?
The Microsoft Exam SC-900 audience may include business stakeholders, new or existing IT professionals, or students who have an interest in Microsoft security, compliance, and identity solutions.
Skills Acquired
Candidates should be familiar with Microsoft Azure and Microsoft 365 and want to understand how Microsoft security, compliance, and identity solutions can span across these solution areas to provide a holistic and end-to-end solution.
Course Outline
The Microsoft Exam SC-900 covers the latest and updated exam updates -
Domain 1 - Describe the concepts of security, compliance, and identity (10–15%)
1.1 Describe security and compliance concepts
- Describe the shared responsibility model
- Describe defense-in-depth
- Describe the Zero Trust model
- Describe encryption and hashing
- Describe Governance, Risk, and Compliance (GRC) concepts
1.2 Define identity concepts
- Define identity as the primary security perimeter
- Define authentication
- Define authorization
- Describe identity providers
- Describe the concept of directory services and Active Directory
- Describe the concept of federation
Domain 2 - Describe the capabilities of Microsoft Entra (25–30%)
2.1 Describe function and identity types of Microsoft Entra ID
- Describe Microsoft Entra ID
- Describe types of identities, including agent ID
- Describe hybrid identity
2.2 Describe authentication capabilities of Microsoft Entra ID
- Describe the authentication methods
- Describe multifactor authentication (MFA)
- Describe password protection and management capabilities
2.3 Describe access management capabilities of Microsoft Entra ID
- Describe Microsoft Entra Conditional Access
- Describe Microsoft Entra roles and role-based access control (RBAC)
2.4 Describe identity protection and governance capabilities of Microsoft Entra
- Describe Microsoft Entra ID Governance
- Describe access reviews
- Describe the capabilities of Microsoft Entra Privileged Identity Management
- Describe Microsoft Entra ID Protection
Domain 3 - Describe the capabilities of Microsoft security solutions (35–40%)
3.1 Describe core infrastructure security services in Azure
- Describe Azure DDoS Protection
- Describe Azure Firewall
- Describe Azure Web Application Firewall (WAF)
- Describe network segmentation with Azure virtual networks
- Describe network security groups (NSGs)
- Describe Azure Bastion
- Describe Azure Key Vault
3.2 Describe security management capabilities of Azure
- Describe Microsoft Defender for Cloud
- Describe Cloud Security Posture Management (CSPM)
- Describe how security policies, standards, and recommendations improve the cloud security posture
- Describe enhanced security features provided by cloud workload protection
3.3 Describe capabilities of Microsoft Sentinel
- Define the concepts of security information and event management (SIEM) and security orchestration automated response (SOAR)
- Describe threat detection and mitigation capabilities in Microsoft Sentinel
3.4 Describe threat protection with Microsoft Defender XDR
- Describe Microsoft Defender XDR services
- Describe Microsoft Defender for Office 365
- Describe Microsoft Defender for Endpoint
- Describe Microsoft Defender for Cloud Apps
- Describe Microsoft Defender for Identity
- Describe Microsoft Defender Vulnerability Management
- Describe Microsoft Defender Threat Intelligence (Defender TI)
- Describe the Microsoft Defender portal
Domain 4 - Describe the capabilities of Microsoft compliance solutions (20–25%)
4.1 Describe Microsoft Service Trust Portal and privacy principles
- Describe the Service Trust Portal offerings
- Describe the privacy principles of Microsoft
4.2 Describe compliance management capabilities of Microsoft Purview
- Describe the Microsoft Purview portal
- Describe Compliance Manager
- Describe the uses and benefits of compliance score
4.3 Describe information protection, data lifecycle management, and data governance capabilities of Microsoft Purview
- Describe the data classification capabilities
- Describe the benefits of Content explorer and Activity explorer
- Describe sensitivity labels and sensitivity label policies
- Describe data loss prevention (DLP)
- Describe records management
- Describe retention policies, retention labels, and retention label policies
4.4 Describe insider risk, eDiscovery, and audit capabilities in Microsoft Purview
- Describe insider risk management
- Describe eDiscovery solutions in Microsoft Purview
- Describe audit solutions in Microsoft Purview
What do we offer?
- Full-Length Mock Test with unique questions in each test set
- Practice objective questions with section-wise scores
- In-depth and exhaustive explanation for every question
- Reliable exam reports evaluating strengths and weaknesses
- Latest Questions with an updated version
- Tips & Tricks to crack the test
- Unlimited access
What are our Practice Exams?
- Practice exams have been designed by professionals and domain experts that simulate real-time exam scenario.
- Practice exam questions have been created on the basis of content outlined in the official documentation.
- Each set in the practice exam contains unique questions built with the intent to provide real-time experience to the candidates as well as gain more confidence during exam preparation.
- Practice exams help to self-evaluate against the exam content and work towards building strength to clear the exam.
- You can also create your own practice exam based on your choice and preference
