SC-900: Microsoft Security, Compliance, and Identity Fundamentals: the practice module
Exam body: Microsoft. Verified for Study guide for Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals, skills measured as of October 21, 2026 on October 29, 2026.
What it covers
Covers: single-answer and multiple-answer multiple-choice questions written to this exam’s outline, format and timing.
Does not cover: active screen, build list, case study, drag and drop, hot area, yes/no question. DoMcq practices standalone multiple-choice questions, one at a time; the real exam’s other item types are out of scope.
Question format
- Every question has exactly 4 options.
- One or more correct answers per question (multiple-answer stems say how many to choose, and are scored all-or-nothing unless the module says otherwise).
- Not allowed as an option: “all of the above”, “none of the above”.
Exam mode
Exam mode: 50 questions at the real exam’s pace, 0.9 minutes a question. Microsoft does not publish the SC-900 question count: the real exam is 45 minutes, and Microsoft's pages say most of its exams have 35 to 50 or 40 to 60 questions.
Topics
The official topic list, as the exam body names it. Your questions must use these names; the coverage dashboard compares your set to each topic’s official weight.
| Topic | Weight | Subtopics |
|---|---|---|
| Describe the concepts of security, compliance, and identity | 10–15% | Describe security and compliance concepts · Define identity concepts |
| Describe the capabilities of Microsoft Entra | 25–30% | Describe function and identity types of Microsoft Entra ID · Describe authentication capabilities of Microsoft Entra ID · Describe access management capabilities of Microsoft Entra ID · Describe identity protection and governance capabilities of Microsoft Entra |
| Describe the capabilities of Microsoft security solutions | 35–40% | Describe core infrastructure security services in Azure · Describe security management capabilities of Azure · Describe capabilities of Microsoft Sentinel · Describe threat protection with Microsoft Defender XDR |
| Describe the capabilities of Microsoft compliance solutions | 20–25% | Describe Microsoft Service Trust Portal and privacy principles · Describe compliance management capabilities of Microsoft Purview · Describe information protection, data lifecycle management, and data governance capabilities of Microsoft Purview · Describe insider risk, eDiscovery, and audit capabilities in Microsoft Purview |
Trademarks
DoMcq is an independent practice tool. It is not affiliated with, endorsed by, sponsored by or approved by any exam body. Exam names are used only to say which exam a module is for. DoMcq holds no exam content: a module is the exam body's published topic names, the question format, the exam's timing, its published weights and a prompt, and every question in DoMcq is a student's own. The marks below belong to their owners. Trademarks
DoMcq is an independent practice tool and is not affiliated with, or authorized, sponsored, endorsed or approved by, Microsoft Corporation; the names are used only to identify the exam. Microsoft, Azure, Microsoft Defender, Microsoft Entra, Microsoft Purview and Microsoft Sentinel are trademarks of the Microsoft group of companies. All other trademarks are the property of their respective owners.
Use it
Practice the questions you already have: a PDF or Word file of multiple-choice questions, from a class or a study group, becomes a timed practice test here, with your own AI doing the copying. Every step, with pictures: How to turn a PDF or Word file of multiple-choice questions into a timed practice test.
Convert questions I already haveGenerate new questions
Free to start. DoMcq never writes or fixes questions; it checks the file your AI produces and gives you the practice system.