Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Test
Build your confidence for Microsoft Security, Compliance, and Identity Fundamentals SC-900. Practice the concepts, understand the answers, and strengthen your knowledge one question at a time.
Try a sample questionExam overview and details
Microsoft Security, Compliance, and Identity Fundamentals (SC-900) assesses foundational security and identity concepts, Microsoft Entra capabilities, Microsoft security solutions and Microsoft compliance solutions. It focuses on understanding capabilities across Microsoft's services. This practice page supports those distinctions; it is not a substitute for implementation experience or an advanced security certification.
Sample Questions
Choose an answer and explore the explanation to see how practice works.
Proseware Legal keeps client records for seven years, uses Microsoft Purview, and must prove that privileged access is reviewed quarterly. The legal department needs records to be declared, protected from deletion, and managed through disposition review. Which SC-900 concept or Microsoft capability best fits this requirement?
Tailspin Toys uses Microsoft 365, Azure virtual networks, and several SaaS apps; executives want simpler sign-in without weakening security. A payment workload, jump hosts, and reporting servers must be isolated into separate address spaces with controlled traffic paths. Which SC-900 concept or Microsoft capability best fits this requirement?
Alpine Ski House has seasonal workers, shared warehouse devices, and a requirement to protect confidential product-launch files. An auditor asks for Microsoft cloud audit reports, compliance guides, and trust documentation for Microsoft services. Which SC-900 concept or Microsoft capability best fits this requirement?
Contoso Bank has 7,200 Microsoft 365 users, two Azure subscriptions, and a small on-premises AD DS forest that still hosts a legacy payroll app. A cloud team wants to map Azure resource configuration to standards such as ISO 27001 and see failed controls. Which SC-900 concept or Microsoft capability best fits this requirement?
Fabrikam Health operates clinics in three states, stores patient scheduling data in SharePoint, and allows contractors to use partner accounts. A finance application writes transaction files to storage and must detect any unauthorized modification before quarterly reporting. Which SC-900 concept best fits this requirement?
Career Opportunities & Salary
Exam insights and study advice
Separate identity, threat detection and data-governance requirements before choosing a Microsoft service. For each missed question, state the object being protected and the action requested: authentication, authorization, investigation, classification or retention. Then compare the relevant product capabilities in Microsoft Learn. Avoid selecting a product simply because its name sounds security-related.
Your Path Forward
What this exam covers
Use the published domain weights to plan your study. Practice results do not predict your certification exam score.