Skip to main content
← Back to certifications
MicrosoftCybersecurityFoundationalVendor-specificActive

Microsoft Security, Compliance, and Identity Fundamentals

A foundational Microsoft credential introducing security, compliance, and identity concepts across Microsoft cloud services and related management capabilities.

Last verified: 2026-09-01

Overview

Microsoft Security, Compliance, and Identity Fundamentals validates foundational knowledge of security, compliance, and identity concepts across Microsoft cloud services. It introduces Zero Trust and shared responsibility concepts, Microsoft Entra capabilities, Microsoft security solutions, and Microsoft compliance and data-governance capabilities. It is designed for students, business stakeholders, and IT professionals beginning a Microsoft security learning path.

Recommended experience
No formal prerequisite is required. Microsoft recommends familiarity with Microsoft Azure and Microsoft 365 and an interest in understanding how security, compliance, and identity capabilities work across Microsoft cloud services.
Estimated study time
25–50 hours
Target job roles
IT Support SpecialistJunior Security AnalystSecurity AdministratorCompliance AnalystBusiness StakeholderStudent

Exam Details

Microsoft Security, Compliance, and Identity Fundamentals

Exam code
SC-900
Number of exams
1
Duration
45 minutes
Question count
Question count varies; Microsoft does not publish a fixed count.
Delivery method
Pearson VUE testing center or online proctored; Certiport also available for eligible students and educators
Price
Varies by country or region

Skills and Domains

Describe the concepts of security, compliance, and identity

10–15%

Shared responsibility, defense in depth, Zero Trust, encryption, GRC, authentication, and identity concepts.

Describe the capabilities of Microsoft Entra

25–30%

Microsoft Entra identity, authentication, access management, identity protection, and governance capabilities.

Describe the capabilities of Microsoft security solutions

35–40%

Azure infrastructure security, Microsoft Defender capabilities, posture management, and threat protection.

Describe the capabilities of Microsoft compliance solutions

20–25%

Microsoft Purview, information protection, data lifecycle, insider risk, eDiscovery, audit, and compliance capabilities.

Study Resources

Security, Compliance, and Identity Fundamentals

Official resource

Documentation · Free

Official certification and SC-900 exam page.

View resource

SC-900 Study Guide

Official resource

Official Guide · Free

Official Microsoft study guide with current skills measured.

View resource

Microsoft Credential Expiration Policy

Official resource

Documentation · Free

Official policy confirming Fundamentals certifications do not expire.

View resource

Renewal

Validity period
Does not expire
Renewal method
No renewal required.
Notes
Microsoft Fundamentals certifications do not expire.

Recommended Before

Verify with official provider.

Recommended After

Verify with official provider.

Alternatives

Verify with official provider.

Specializations

Verify with official provider.

Explore certification categories

Browse focused certification guides by technology and career domain.