← All Certifications
Microsoft

Security Fundamentals Certification

SC-900 · 4 domains

Last updated: March 31, 2026

Exam Syllabus & Domains

The Security Fundamentals certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 10-15%

Security, Compliance, and Identity Concepts

  • 1.1 Define security and compliance concepts
  • 1.2 Define identity concepts
Zero TrustDefense in DepthCIA TriadShared ResponsibilityAuthentication vs AuthorizationIdentity ProviderFederationEncryption
Domain 2 25-30%

Microsoft Entra Capabilities

  • 2.1 Describe function and identity types of Microsoft Entra ID
  • 2.2 Describe authentication capabilities
  • 2.3 Describe access management capabilities
  • 2.4 Describe identity protection and governance
Microsoft Entra IDConditional AccessMFASSPRPIMEntra ConnectB2B/B2CIdentity Protection
Domain 3 35-40%

Microsoft Security Solutions

  • 3.1 Describe Microsoft security management capabilities
  • 3.2 Describe threat protection with Microsoft Defender
  • 3.3 Describe Microsoft Sentinel
Microsoft Defender for CloudDefender for EndpointMicrosoft SentinelSIEM/SOARSecure ScoreCloud Security PostureThreat IntelligenceIncident Response
Domain 4 15-20%

Microsoft Compliance Solutions

  • 4.1 Describe Microsoft Purview data governance
  • 4.2 Describe compliance management capabilities
  • 4.3 Describe information protection and data loss prevention
Microsoft PurviewSensitivity LabelsDLP PoliciesCompliance ManagereDiscoveryInsider RiskInformation BarriersData Classification

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Security, Compliance, and Identity Concepts
10-15%
D2 Microsoft Entra Capabilities
25-30%
D3 Microsoft Security Solutions
35-40%
D4 Microsoft Compliance Solutions
15-20%

Study Tips

Free Study Resources

๐Ÿ“‹

Study Roadmap

Week-by-week study plan with free resources

โœ…

Study Tracker

Track objective completion with progress dashboard

๐Ÿ’ฐ

Cost Calculator

Total cost breakdown and ROI analysis

๐Ÿงช

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the Security Fundamentals Practice Quiz

Get the Security Fundamentals Study Planner

Fillable PDF with 4-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your Security Fundamentals certification training:

Frequently Asked Questions

What is the Security Fundamentals certification?

The Security Fundamentals (SC-900) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the Security Fundamentals certification syllabus cover?

The Security Fundamentals exam syllabus covers 4 domains. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for Security Fundamentals?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for Security Fundamentals?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.