Familiarity with Azure and Microsoft 365
RecommendedMicrosoft expects you to know the basics of Azure and Microsoft 365 before you start.
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
Validates foundational knowledge of security, compliance and identity concepts and Microsoft Entra, security and compliance solutions.
Summary
SC-900 is Microsoft's entry-level certification for people new to security, compliance and identity. It tests whether you understand core security concepts and can describe what Microsoft Entra, Defender, Sentinel and Purview do, not how to configure them.
Good fit if
- You're new to Microsoft security, compliance or identity tools
- You work in IT or compliance near Azure or Microsoft 365
- You want a low-cost first step before SC-200, SC-300 or SC-100
Salary & jobs
Prerequisites
Cost
What holders say
A cheap way to learn Microsoft's security tools
People moving toward identity or compliance roles from IT support describe SC-900 as a reasonable way to learn Entra, Defender and Purview terms. Some note it overlaps with Security+.
Most useful as a step to SC-200 or SC-300
Candidate discussions usually point SOC-minded people to SC-200 and identity-minded people to SC-300 next.
Experienced people often skip it
People who already hold Security+ or work in cloud security are often told to go straight to an associate exam, unless a voucher makes SC-900 free.
Renewal
SC-900 does not expire.
- Validity
- No expiry
- Renewal requirement
- None
Microsoft Fundamentals certifications have no renewal assessment and no fee.
Renew your Microsoft certification ↗Alternatives
FAQ
Does SC-900 expire?
No. Microsoft Fundamentals certifications do not expire and have no renewal fee.
What changes on the SC-900 exam on October 21, 2026?
The English exam moves to an updated skills list. The changes are minor wording updates in the Entra identity types and Defender XDR sections, and the weights stay the same. Other languages update about eight weeks later, so study from the version that matches your exam date and language.
How many questions are on the SC-900 exam?
Microsoft does not publish a fixed number. Most Microsoft exams have 40 to 60 questions, and SC-900 gives you 45 minutes.
Can I use Microsoft Learn during the SC-900 exam?
No. Microsoft Learn is available only on associate and expert exams, not Fundamentals.
Should I take AZ-900 before SC-900?
It is not required. Take AZ-900 first only if Azure is completely new to you.
Last updated October 2026