Microsoft Security, Compliance, and Identity Fundamentals (SC-900) Exam Prep

What's inside

1. Level 1: Exam Orientation and Core Security ConceptsFree
   [Describe the concepts of security, compliance, and identity] Starts with how the exam works: Microsoft's study guide is free on Microsoft Learn and is not reproduced here, a score of 700 or greater is needed to pass, length, price and languages must be checked on Microsoft's exam page, this course is independent of Microsoft and not endorsed by it, and no pass is promised; it then covers the shared responsibility model, defense-in-depth, the Zero Trust model, encryption and hashing, and Governance, Risk, and Compliance (GRC) concepts.
2. Level 2: Identity Concepts: AuthN, AuthZ, IdPs and FederationFree
   [Describe the concepts of security, compliance, and identity] Defines identity as the primary security perimeter, authentication and authorization, identity providers, directory services and Active Directory, and federation.
3. Level 3: Microsoft Entra ID, Identity Types and Hybrid
   [Describe the capabilities of Microsoft Entra] Covers the function of Microsoft Entra ID, the types of identities including workload identities, and hybrid identity.
4. Level 4: Authentication Methods, MFA and Password Protection
   [Describe the capabilities of Microsoft Entra] Covers the authentication methods in Microsoft Entra ID, multifactor authentication (MFA), and password protection and management capabilities.
5. Level 5: Conditional Access, Entra Roles and RBAC
   [Describe the capabilities of Microsoft Entra] Covers Microsoft Entra Conditional Access, Microsoft Entra roles and role-based access control (RBAC), with a description in words of where Conditional Access policies are set in the Microsoft Entra admin center.
6. Level 6: Microsoft Entra ID Governance and Access Reviews
   [Describe the capabilities of Microsoft Entra] Covers Microsoft Entra ID Governance and the identity lifecycle, plus how access reviews keep access rights correct over time.
7. Level 7: Privileged Identity Management and ID Protection
   [Describe the capabilities of Microsoft Entra] Covers the capabilities of Microsoft Entra Privileged Identity Management and Microsoft Entra ID Protection.
8. Level 8: Azure DDoS Protection, Azure Firewall and WAF
   [Describe the capabilities of Microsoft security solutions] Covers the core infrastructure security services Azure DDoS Protection, Azure Firewall and Azure Web Application Firewall (WAF).
9. Level 9: VNet Segmentation, NSGs, Bastion and Key Vault
   [Describe the capabilities of Microsoft security solutions] Covers network segmentation with Azure virtual networks, network security groups (NSGs), Azure Bastion and Azure Key Vault.
10. Level 10: Defender for Cloud, CSPM and Workload Protection
    [Describe the capabilities of Microsoft security solutions] Covers Microsoft Defender for Cloud, Cloud Security Posture Management (CSPM), how security policies, standards and recommendations improve the cloud security posture, and the enhanced security features of cloud workload protection, with a description in words of the Defender for Cloud dashboard.
11. Level 11: SIEM, SOAR and Microsoft Sentinel
    [Describe the capabilities of Microsoft security solutions] Defines security information and event management (SIEM) and security orchestration automated response (SOAR), then covers threat detection and mitigation in Microsoft Sentinel.
12. Level 12: Defender XDR, Office 365, Endpoint and MDVM
    [Describe the capabilities of Microsoft security solutions] Covers Microsoft Defender XDR services, Microsoft Defender for Office 365, Microsoft Defender for Endpoint and Microsoft Defender Vulnerability Management.
13. Level 13: Cloud Apps, Identity, Threat Intel, Defender Portal
    [Describe the capabilities of Microsoft security solutions] Covers Microsoft Defender for Cloud Apps, Microsoft Defender for Identity and Microsoft Threat Intelligence, with a tour of the Microsoft Defender portal described in words.
14. Level 14: Service Trust Portal, Privacy and Compliance Manager
    [Describe the capabilities of Microsoft compliance solutions] Covers the Service Trust Portal offerings, the privacy principles of Microsoft, the Microsoft Purview portal, Compliance Manager, and the uses and benefits of compliance score, with a description in words of the portal layout.
15. Level 15: Data Classification, Sensitivity Labels and DLP
    [Describe the capabilities of Microsoft compliance solutions] Covers the data classification capabilities of Microsoft Purview, the benefits of Content explorer and Activity explorer, sensitivity labels and sensitivity label policies, and data loss prevention (DLP).
16. Level 16: Records Management and Retention
    [Describe the capabilities of Microsoft compliance solutions] Covers data lifecycle management, records management, and retention policies, retention labels and retention label policies in Microsoft Purview.
17. Level 17: Insider Risk, eDiscovery and Audit in Purview
    [Describe the capabilities of Microsoft compliance solutions] Covers insider risk management, eDiscovery solutions and audit solutions in Microsoft Purview.
18. Level 18: Timed Mock Exam: 45 Questions in 60 Minutes Timed mock
    [All exam sections] A timed mock exam of 45 original scenario, recognition and product-contrast questions in 60 minutes, weighted like the four skill areas, with a 70% pass mark and an explanation for every distractor.

Access

The first 2 levels are free with a free account. Every level, the podcast edition and the AI tutor come with All Access at £4.99/month or any Creator plan — see pricing.

Start free →