Microsoft Security, Compliance and Identity Fundamentals (SC-900)
Exam SC-900 Microsoft Foundation
The entry Microsoft security certification — the security, compliance and identity story across Microsoft 365 and Azure.
1 course · 6 sections · 155 lectures · 22 labs · ≈ 19 h of hands-on labs
All 22 SC-900 hands-on labs on one page →
Free to start: the free lessons and guides for this roadmap →
Exam domains
- Describe the concepts of security, compliance, and identity — 10–15%
- Describe the capabilities of Microsoft Entra — 25–30%
- Describe the capabilities of Microsoft security solutions — 35–40%
- Describe the capabilities of Microsoft compliance solutions — 20–25%
Microsoft publishes a range for each domain. The outline was updated on 21 October 2026 with minor changes; the four domains and their weights did not change.
Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Learn the SC-900 syllabus
Identity, security, compliance and Microsoft's tooling.
1 course · 6 sections · 155 lectures
Learn
- CourseSC-900: Microsoft Security, Compliance, and Identity Fundamentals (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
6 sections · 155 lectures
- Course Introduction 2
- Module 1 Describe the concepts of security, compliance, and identity 16
- Module 2 Describe the concepts & capabilities of Microsoft identity and access 41
- Module 3 : Describe the capabilities of Microsoft security solutions 47
- Module 4 : Describe the capabilities of Microsoft compliance solutions 46
- SC 900 Certification - Updates 3
Step 2 — See the tools working
Defender and identity protection in practice.
18 labs
Learn
- CourseCovered in SC-900: Microsoft Security, Compliance, and Identity Fundamentals (opens in a new tab)opens on courses.stationx.net — Defender, Sentinel and identity sections 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
6 sections · 155 lectures
- Course Introduction 2
- Module 1 Describe the concepts of security, compliance, and identity 16
- Module 2 Describe the concepts & capabilities of Microsoft identity and access 41
- Module 3 : Describe the capabilities of Microsoft security solutions 47
- Module 4 : Describe the capabilities of Microsoft compliance solutions 46
- SC 900 Certification - Updates 3
No Purview or compliance labs exist yet; the course's Module 4 (Microsoft compliance solutions) teaches them.
Practise
- Infra LabsMicrosoft Security, Compliance, and Identity Fundamentals — 9 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Configure Multi-factor Authentication (MFA) by Using Microsoft Entra IDLevel: GuidedDuration: 30 min
- Configure Azure Policy to Improve Cloud SecurityLevel: GuidedDuration: 30 min
- Can You Manage Azure Security and Compliance?Level: AdvancedDuration: 45 min
- Configure Azure Firewall Rules to Secure Network TrafficLevel: GuidedDuration: 30 min
- Configure a Web Application Firewall (WAF) to Manage and Secure Web TrafficLevel: GuidedDuration: 30 min
- Can You Integrate Azure Firewall Technologies?Level: AdvancedDuration: 45 min
- Exploring Microsoft Entra ID by using Self-Service Password Reset (SSPR)Level: GuidedDuration: 30 min
- Explore Microsoft Defender for CloudLevel: GuidedDuration: 30 min
- Deploy Azure BastionLevel: GuidedDuration: 30 min
- Infra LabsMicrosoft Defender — 9 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Working with Microsoft Defender Products [Prerequisite Lab]Level: PrerequisiteDuration: 1 h
- Introduction to Microsoft Defender OverviewLevel: GuidedDuration: 30 min
- Microsoft Defender for Identity SetupLevel: GuidedDuration: 1 h
- Microsoft Defender for EndpointLevel: GuidedDuration: 45 min
- Comprehensive Security Management with Microsoft Defender and Entra IDLevel: AdvancedDuration: 45 min
- Microsoft Defender for Office 365Level: GuidedDuration: 30 min
- Microsoft Defender for Cloud AppsLevel: GuidedDuration: 30 min
- Advanced Threat Hunting with Microsoft 365 DefenderLevel: GuidedDuration: 1 h
- Incident Response with Microsoft Defender XDRLevel: ExpertDuration: 1 h 30 min
Step 3 — Practise the ideas
Hashing, multifactor sign-in, endpoint protection and finding sensitive data, hands-on. These labs practise the ideas, not the Microsoft products.
4 labs
Practise
- LabsCyber Defense Forensics Analyst Training Series — 1 lab 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Hash VerificationDuration: 1 h
- LabsCryptography Attack and Defence — 1 lab 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Cryptography: Setting Up Two Factor AuthenticationDuration: 2 h
- LabsWindows Administration Fundamentals — 1 lab 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Configure Windows Defender on a Windows SystemDuration: 2 h
- LabsCritical Security Controls — 1 lab 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Sensitive Information IdentificationDuration: 1 h
