Skip to content
CBT Nuggets
DemoBook a Demo
MicrosoftEntry

Security, Compliance, and Identity Fundamentals (SC-900)

Standardize your team on Security, Compliance, and Identity Fundamentals (SC-900) with a structured Microsoft training path — a blueprint-weighted practice exam and team admin reporting included on every CBT Nuggets Teams seat.

1
Course
1
Practice exam
5
Core skills
$99
Exam fee (Microsoft)
Microsoft Azure / 365 admin team at workstations with PowerShell and identity consoles
Difficulty
Difficulty: 1 of 5 (Easy)
Easy
Exam fee (Microsoft)
$99
Courses on path
1
Exam code
  • SC-900

Exam datasheet

Prerequisites
None
Recommended experience
Basic understanding of security, compliance, and identity concepts
Recertification
Lifetime

Exams

Exams for this certification

Exam fees per engineer, paid to the exam vendor$99

Exam — Required

Every engineer on the Security, Compliance, and Identity Fundamentals (SC-900) path takes SC-900.

  1. SC-900Microsoft Certified: Security, Compliance, and Identity FundamentalsPractice exam included on every Teams seat
    Exam fee
    $99
    Exam length
    45 minutes
    Questions
    40-60
    Passing score
    700/1000

    Exam blueprint: SC-900

Skills your team builds

Security FundamentalsCompliance and GovernanceIdentity and Access ManagementMicrosoft Azure SecurityMicrosoft 365 Security

Training path

Your team's training path

One CBT Nuggets course covers the full Security, Compliance, and Identity Fundamentals (SC-900) path. Your team can start today and have admin reporting visible from day one.

  1. Start here · primary course

    Microsoft SC-900

    Cloud adoption spreads security, identity, and compliance work across help desk staff, sysadmins, and compliance stakeholders who often lack a shared vocabulary. When terms like Zero Trust, least privilege, and the shared responsibility model mean different things to different people, risk discussions stall and audit conversations take longer than they should. This entry-level SC-900 course gives IT Directors and Training Managers a single baseline to assign across the team. Learners cover Microsoft Entra ID (Azure AD) identity concepts, authentication and self-service password reset, Microsoft Defender threat protection, Intune endpoint security, and Microsoft Purview capabilities such as sensitivity labels, DLP, eDiscovery, audit, data lifecycle management, and insider risk. The course stays conceptual, with walkthroughs in Azure, Microsoft 365, Intune, and Purview, so new hires, help desk technicians, and non-technical risk stakeholders can all take part. After completion, your team can explain Microsoft security terminology to technical and non-technical audiences, identify which Microsoft tool fits a given identity, threat, or compliance use case, and route questions to the right platform capability or specialist team. The course also provides a structured review of the fundamentals covered by the SC-900 certification exam. At about 21.7 hours across 25 skills, the course fits an onboarding cohort or a team certification push. Team Leads can bundle it into Playlists, and Training Managers can track per-learner progress and completion with Team Reporting before moving the team on to role-based Microsoft security training.

    John Munjoma, James Conrad, Bob Salmans
    140 videosPractice exam22h
    Open course

Every certification course includes

  • Expert-led video training
  • Certification practice exams
  • Per-team completion reporting

Microsoft career ladder

Where Security, Compliance, and Identity Fundamentals (SC-900) sits in your team's Microsoft progression

The cert your team is on now, plus the levels above and below. Use this to map an engineer's next-step credential or to plan headcount coverage across tiers.

Customer outcome

Build SC-900 capability across the whole team, not one engineer

Assign the Security, Compliance, and Identity Fundamentals (SC-900) course to the engineers who need it, and the team report shows who has started, who has finished, and who has passed the practice exam — the view leadership uses to see Microsoft skills coverage across the team and where the gaps are.

Team capability

Make SC-900 a number on your team capability sheet, not a single engineer’s certificate.

Standardizing your team on SC-900 gives leadership a clear picture of Microsoft skills coverage — who has completed the training, who is still on the path, and where the gaps are — so staffing and escalation plans rest on known capability instead of on one engineer.

Credential: Security, Compliance, and Identity Fundamentals (SC-900)

Exam
  • SC-900

Frequently asked questions about Security, Compliance, and Identity Fundamentals (SC-900) training

Common questions IT directors ask when evaluating Security, Compliance, and Identity Fundamentals (SC-900) training for their team.

How does Security, Compliance, and Identity Fundamentals (SC-900) fit into our compliance and governance program?

IT leaders often cite SC-900 when documenting that staff share a baseline in identity, threat protection, information protection, and eDiscovery and audit concepts across Azure and Microsoft 365. CBT Nuggets team reporting provides per-learner completion and completion exports that can support that documentation. The auditor's control crosswalk decides how the credential formally maps to the organization's framework.

Who on the team should hold Security, Compliance, and Identity Fundamentals (SC-900), and what can a certified team own?

SC-900 suits help desk staff, systems administrators, junior security analysts, and compliance-adjacent roles who need a common foundation in Microsoft security. The linked course covers zero trust, defense in depth, Azure AD identity types, authentication, identity protection and governance, Microsoft Defender threat protection, Intune endpoint security, and Microsoft 365 security management, eDiscovery, audit, and information protection. That gives a certified team shared vocabulary for Azure and Microsoft 365 security, compliance, and identity work.

What does CBT Nuggets Security, Compliance, and Identity Fundamentals (SC-900) training include for a team?

CBT Nuggets Security, Compliance, and Identity Fundamentals (SC-900) courses are built by named expert trainers. Where a course includes hands-on virtual labs or a practice exam mapped to Microsoft's published exam objectives, the course list on this page says so. Team admin reporting tracks assignment, completion and exam readiness per engineer — the view managers use to run a team training program.

How do I assign and track Security, Compliance, and Identity Fundamentals (SC-900) training for my team?

From the admin console, managers assign the Security, Compliance, and Identity Fundamentals (SC-900) courses directly to specific engineers or role groups and track completion and practice-exam scores per learner. Team-wide reporting rolls up to a single dashboard you can review or export for leadership reviews or compliance reporting.

How long does it take to certify a team on Security, Compliance, and Identity Fundamentals (SC-900)?

The linked live courses add up to about 22 hours of video. The actual time to certify depends on each team member's starting point with Azure AD, Microsoft 365, and core security concepts.

What if Microsoft updates the Security, Compliance, and Identity Fundamentals (SC-900) exam objectives?

CBT Nuggets updates Microsoft course content as exam objectives refresh, and this page shows the current exam's status and any retirement date the vendor has announced. When Microsoft restructures or renames a track, the assigned training stays aligned with the same team training plan, and the training stays current without anyone losing their progress mid-stream.

Ready to Security, Compliance, and Identity Fundamentals (SC-900)-certify your team?

Build Security, Compliance, and Identity Fundamentals (SC-900) capability across your team

See how CBT Nuggets helps IT leaders plan and track Security, Compliance, and Identity Fundamentals (SC-900) training across the team — a practice exam and reporting included.