SC-900 Domain Breakdown

• Security, Compliance & Identity Concepts (10–15%) — Foundational concepts: zero trust, shared responsibility, encryption basics, and compliance frameworks
• Microsoft Entra & Identity (25–30%) — Identity management with Microsoft Entra ID, authentication methods, conditional access, and identity governance
• Microsoft Security Solutions (25–30%) — Defender products, Sentinel (SIEM/SOAR), security management, and threat protection across Azure and M365
• Microsoft Compliance Solutions (25–30%) — Purview compliance portal, data governance, information protection, insider risk, and eDiscovery

Exam Day Logistics

• Questions: 40–60
• Time: 60 minutes
• Passing Score: 700/1000
• Cost: $165
• Prerequisites: None — no prior experience required

How to Study

SC-900 has three domains all weighted at 25–30%, which means balanced preparation across identity, security, and compliance is essential. The Microsoft Entra (identity) domain catches many candidates off guard because of the volume of product names — Microsoft Defender for Identity vs. Defender for Endpoint vs. Defender for Cloud are all different things. Use the Cover6 Train Up method: start with 25-question domain-specific sets to identify where product knowledge gaps exist, then build to 50 and 60-question mixed exams. Keep running full timed exams until you’re consistently at 80% or above. The study guide bundled with the Cover6 SC-900 practice exam provides product context and conceptual explanations that go beyond simple definitions. Microsoft Learn’s SC-900 learning path is free and structured — use it alongside practice questions.