Study by topic
Work through the complete question bank by official exam domain, save questions, and revisit incorrect answers.
MicrosoftSC-900
SC-900 Practice Exam — Microsoft Security, Compliance, and Identity Fundamentals
SC-900 asks you to place Microsoft's security, compliance and identity products in the right spot: what Zero Trust and defence in depth mean, what Microsoft Entra ID handles for sign-in and access, what each Defender product, Sentinel and Defender for Cloud protects, and what Microsoft Purview does for data and compliance. Practise across all four official skill areas with full 50-question papers and a score breakdown per skill area.
SC-900 exam at a glance
- Questions per paper
- 50
- Time limit
- 45 minutes
- Passing score
- 700 / 1000
- Question format
- Multiple choice, multiple response, drag and drop and hot area
- Certification valid for
- Does not expire
- ReadyForCert access
- 60 days · $8.99 AUD
- Free sample
- 20 questions
Study, practise, review
Timed exams
Take 50-question simulations with a 45-minute timer and saved progress.
Exam reports
Review your score, every answer, and your performance across each exam domain.
What the SC-900 exam covers
Describe the concepts of security, compliance, and identity
The shared responsibility model, defence in depth, Zero Trust, encryption and hashing, governance, risk and compliance, and authentication, authorization, identity providers and federation.
10–15%Describe the capabilities of Microsoft Entra
Microsoft Entra ID and its identity types, authentication methods and MFA, Conditional Access and roles, and ID Governance, access reviews, Privileged Identity Management and ID Protection.
25–30%Describe the capabilities of Microsoft security solutions
Azure network and infrastructure protection, Microsoft Defender for Cloud, Microsoft Sentinel as SIEM and SOAR, and the Microsoft Defender XDR services and portal.
35–40%Describe the capabilities of Microsoft compliance solutions
The Service Trust Portal and Microsoft's privacy principles, Compliance Manager and compliance score, and Microsoft Purview's data classification, sensitivity labels, DLP, retention, insider risk, eDiscovery and audit.
20–25%
A sample SC-900 question
One question written for this page, in the same style as the questions in the bank.
Describe the capabilities of Microsoft Entra
A company wants users to be asked for multifactor authentication only when they sign in from outside the corporate network. Which Microsoft Entra feature should the company use?
- AConditional Access — Correct answer
- BAccess reviews
- CPrivileged Identity Management
- DAdministrative units
About the SC-900 exam
How many questions are on the SC-900 exam and how long is it?
Microsoft does not publish a fixed question count, but fundamentals exams typically run 40 to 60 questions, and you get 45 minutes to answer them. ReadyForCert papers use 50 questions on the same 45-minute clock.
What score do I need to pass SC-900?
700 on a scale of 1 to 1,000. The score is scaled rather than a raw percentage of questions answered correctly, so it does not map exactly onto “70% of questions right”.
Do I need security experience to take SC-900?
No. SC-900 is aimed at business stakeholders, students and IT professionals new to Microsoft security. Some familiarity with Azure and Microsoft 365 helps, but the exam tests what each product does rather than how to configure it.
Are these the real SC-900 exam questions?
No. These are practice questions written against the current Microsoft study guide. Real exam content is covered by Microsoft's exam agreement, and the bank is refreshed regularly.
Other certifications you can practise
Same format, same price, same free quiz.
