← SC-900 overviewSecurity, Compliance and Identity Fundamentals / STUDY TOOLS
Exam coverage map
Targets Microsoft’s published October 21, 2026 update. If sitting earlier, compare your current booking outline. Fundamentals describe capabilities; implementation depth is available in the SC-300 and SC-500 paths.
Published objectives
| Objective |
Revision topic |
| 1A · Security and compliance concepts |
01 Security Principles and Controls |
| 1B · Identity concepts |
01 Security Principles and Controls, 02 Entra Identity, Authentication and Governance |
| 2A · Entra identity types |
02 Entra Identity, Authentication and Governance |
| 2B · Authentication |
02 Entra Identity, Authentication and Governance |
| 2C · Access management |
02 Entra Identity, Authentication and Governance |
| 2D · Protection and governance |
02 Entra Identity, Authentication and Governance |
| 3A · Infrastructure protection |
03 Azure Infrastructure and Cloud Posture |
| 3B · Cloud security management |
03 Azure Infrastructure and Cloud Posture |
| 3C · Sentinel |
04 Defender XDR, Sentinel and Threat Operations |
| 3D · Defender XDR |
04 Defender XDR, Sentinel and Threat Operations |
| 4A · Trust and privacy |
05 Purview, Retention, Discovery and Trust |
| 4B · Compliance management |
05 Purview, Retention, Discovery and Trust |
| 4C · Information protection and lifecycle |
05 Purview, Retention, Discovery and Trust |
| 4D · Insider risk, discovery and audit |
05 Purview, Retention, Discovery and Trust |
