1.0Describe the concepts of security, compliance, and identity
12.5%31 practice questions in this domain
- 1.1Describe security and compliance concepts
- 1.2Define identity concepts
SC-900 exam domains and weightings
The SC-900 exam is split into 4 domains. The percentage next to each is the share of the exam it accounts for — study time is best spent proportionally.
2.0Describe the capabilities of Microsoft Entra
27.5%63 practice questions in this domain
- 2.1Describe function and identity types of Microsoft Entra ID
- 2.2Describe authentication capabilities of Microsoft Entra ID
- 2.3Describe access management capabilities of Microsoft Entra ID
- 2.4Describe identity protection and governance capabilities of Microsoft Entra
3.0Describe the capabilities of Microsoft security solutions
37.5%84 practice questions in this domain
- 3.1Describe core infrastructure security services in Azure
- 3.2Describe security management capabilities of Azure
- 3.3Describe capabilities of Microsoft Sentinel
- 3.4Describe threat protection with Microsoft Defender XDR
4.0Describe the capabilities of Microsoft compliance solutions
22.5%50 practice questions in this domain
- 4.1Describe Microsoft Service Trust Portal and privacy principles
- 4.2Describe compliance management capabilities of Microsoft Purview
- 4.3Describe information protection, data lifecycle management, and data governance capabilities of Microsoft Purview
- 4.4Describe insider risk, eDiscovery, and audit capabilities in Microsoft Purview
How to prepare for Microsoft Security, Compliance, and Identity Fundamentals
Most candidates fail SC-900 not because they didn't know the material, but because they couldn't tell which material they were weakest on. Reading the objectives end to end treats every domain as equally important — the exam doesn't. On SC-900, Describe the capabilities of Microsoft security solutions alone is 37.5% of your score.
CertPilot AI works the other way around. It tracks your accuracy per domain, weights each domain by its real exam share, and pulls most of each practice session from wherever you're currently weakest. The result is a single readiness score — at 90% you're in the range where candidates typically pass, so you book the exam on evidence instead of a hunch.
Every question comes with an AI explanation of why the right answer is right and why each distractor is wrong. The Exam Decoder goes further and breaks down how to read a question — the qualifiers, the scenario framing, and the trap options — which is the skill that separates a 740 from a 700.
Microsoft Security, Compliance, and Identity Fundamentals (SC-900) FAQ
How many questions are on the Microsoft Security, Compliance, and Identity Fundamentals (SC-900) exam?
The SC-900 exam has up to 50 questions and you get 45 minutes to complete it.
What score do you need to pass Microsoft Security, Compliance, and Identity Fundamentals?
Microsoft Security, Compliance, and Identity Fundamentals requires a scaled score of 700. Scaled scoring means the raw number of correct answers is adjusted for the difficulty of the specific question set you were served, so there is no fixed percentage that guarantees a pass.
What domains does the SC-900 exam cover?
Microsoft Security, Compliance, and Identity Fundamentals is divided into 4 domains: Describe the concepts of security, compliance, and identity (12.5%), Describe the capabilities of Microsoft Entra (27.5%), Describe the capabilities of Microsoft security solutions (37.5%), Describe the capabilities of Microsoft compliance solutions (22.5%). The heaviest weighted domain is Describe the capabilities of Microsoft security solutions at 37.5% of the exam.
How do I know when I'm ready to book the SC-900 exam?
CertPilot AI calculates a readiness score by weighting your accuracy in each domain by that domain's share of the real exam, then scaling it by how many questions you've actually answered — so a domain you've barely touched can't inflate the number. At 90% you're in the range where candidates typically pass.
How much does the SC-900 exam cost?
The Microsoft Security, Compliance, and Identity Fundamentals exam voucher typically costs around $99 USD. Pricing varies by region and vendors periodically adjust it, so confirm on the official vendor site before booking.
Free to start
Start practising SC-900 questions
Adaptive sessions weighted to the domains above, AI explanations on every question, and a readiness score that tells you when to book.
Start free