SC-900 : Introduction to Microsoft Security, Compliance, and Identity

Describe Security and Compliance Concepts

• Understand shared responsibility and defense-in-depth security models.
• Explain the Zero Trust model.
• Understand encryption and hashing concepts.
• Describe basic compliance concepts.

Describe Identity Concepts

• Differentiate between authentication and authorization.
• Explain the concept of identity as a security perimeter.
• Describe identity-related services.

Describe Types of Functions and Identities in Microsoft Entra ID

• Explain the function of Microsoft Entra ID.
• Describe the types of identities supported by Microsoft Entra ID.

Describe Authentication Capabilities of Microsoft Entra ID

• Explain authentication methods in Microsoft Entra ID.
• Describe multi-factor authentication (MFA) in Microsoft Entra ID.
• Explain self-service password reset (SSPR) in Microsoft Entra ID.
• Describe password management and protection features in Microsoft Entra ID.

Describe Access Management Capabilities of Microsoft Entra ID

• Explain conditional access in Microsoft Entra ID.
• Describe roles and role-based access control (RBAC) in Microsoft Entra ID.

Describe Identity Governance and Protection Features in Azure AD

• Explain identity governance features in Azure.
• Describe Privileged Identity Management (PIM).
• Explain the capabilities of Azure Identity Protection.

Describe Key Security Services for an Infrastructure in Azure

• Secure networks with Azure security features.
• Protect virtual machines with Azure.
• Learn to protect secrets with Azure Key Vault.

Describe Security Management Features in Azure

• Explain Microsoft Defender for Cloud.
• Improve cloud security posture using security policies and initiatives.
• Protect the cloud from cyber threats and vulnerabilities with Microsoft Defender’s three pillars.

Describe Security Capabilities of Microsoft Sentinel

• Understand SIEM and SOAR security concepts.
• Explain how Microsoft Sentinel detects and mitigates threats.
• Describe Microsoft Security Copilot.

Describe Threat Protection with Microsoft Defender XDR

• Explain the Microsoft Defender XDR service.
• Provide integrated protection against sophisticated attacks with Microsoft Defender XDR.
• Explore the Microsoft Defender portal.

Describe the Service Trust Portal and Privacy Capabilities

• Explain the offerings of the Service Trust Portal.
• Describe Microsoft privacy principles.
• Explain Microsoft Priva.

Describe Compliance Management Features in Microsoft Purview

• Describe the Microsoft Purview compliance portal.
• Explain the Compliance Manager.
• Understand the usage and benefits of the compliance score.

Describe Information Protection, Data Lifecycle Management, and Data Governance Features in Microsoft Purview

• Explain data classification features.
• Describe records management.
• Explain data loss prevention (DLP).
• Describe unified data governance.

Describe Insider Risk Management Features in Microsoft Purview

• Explain insider risk management.
• Describe communication compliance.

Describe eDiscovery and Audit Capabilities of Microsoft Purview

• Explain eDiscovery capabilities in Microsoft Purview.
• Describe audit features in Microsoft Purview.

Last updated on 18/12/2023

In this training, we mix theory with technical workshops to quickly make you operational. Additionally, each participant receives course materials at the end of the training.

One of our consultant trainers conducts the training. With solid field experience, they make the learning process both interactive and enriching.

For assessment, the trainer regularly asks questions and uses various methods to continuously measure your progress. This approach promotes a dynamic and engaging learning experience.

After the training, we ask you to complete a satisfaction questionnaire. Your feedback helps us to maintain and constantly improve the quality of our training.

Finally, we offer the flexibility to deliver this training both in-person and remotely, and it can be customized to meet your company’s specific needs upon request.

No prerequisites.

This training prepares you for the Microsoft certification exam “SC-900: Microsoft Security, Compliance, and Identity Fundamentals”. We recommend registering for the exam approximately one month after completing the training. The course materials sent during the training will help you properly review for your certification.

You can register for certification on the Microsoft site. If you would like to buy a certification voucher from us, or if you would like us to support you in this process, please contact us

You can register for one of our training courses up to two business days before it starts, if there are still available places and you signed quote.

If you have specific needs related to a disability, please do not hesitate to make a request; we are happy to adjust our services according to the type of disability.