The exam
SC-900 validates foundational knowledge of security, compliance, and identity (SCI) concepts and of the Microsoft solutions that address them, spanning Microsoft Entra, Microsoft security solutions (Defender, Sentinel, core Azure infrastructure security), and Microsoft compliance solutions in Microsoft Purview. It is a concepts-and-capabilities exam, not a hands-on configuration exam.
Who it is for
Candidates looking to familiarize themselves with the fundamentals of security, compliance, and identity across cloud-based and related Microsoft services — business stakeholders, new or existing IT professionals, or students. Familiarity with Microsoft Azure and Microsoft 365 is expected, along with an interest in how Microsoft SCI solutions span those areas to provide a holistic, end-to-end solution. No hands-on administration experience is assumed.
What it covers
Your readiness map in the app is organised the same way, so what you see here is exactly what you study against.
What Preppio gives you
Across every domain above, in 5 formats: concept, scenario, ordering, multi-select, matching. Each one explains why the right answer is right and every distractor wrong.
Per domain, whether you are ready, weak, or not started — the same domains and weights as the exam itself.
Your study partner. He tracks where you are weak and drills exactly that, instead of serving you what you already know.
Try one
Answer on the page. The explanation appears when you submit; use Next to move through the formats.
Sample 1 · Concept
You are the network administrator for Woodgrove Bank. Woodgrove Bank has a subnet containing several virtual machines. You need to allow inbound traffic on TCP port 443 from a specific range of public IP addresses while denying all other inbound traffic to the subnet, using a solution that evaluates rules based on source, destination, port, and protocol. What should you use?
Pick one, then submit.
Study links
FAQ
45 questions in 45 minutes.
70%, a scaled score of 700.
4 domains, weighted as the exam weights them: Describe the concepts of security, compliance, and identity (13%), Describe the capabilities of Microsoft Entra (28%), Describe the capabilities of Microsoft security solutions (37%) and Describe the capabilities of Microsoft compliance solutions (22%). Your readiness map in the app is organised by the same domains, so what you study against is what the exam tests.
Five formats: concept, scenario, ordering, multi-select and matching. The practice questions use every one of them, and the sample on this page shows one of each.
SC-900 is on the Single, Dual and All Access plans. You start on the free tier and add it from the plan picker inside the app. Three fundamentals exams (AZ-900, CLF-C02 and CDL) are always free, and the sample on this page is free to try.
Every question is generated from the exam's published objectives, then checked for accuracy, answer key and explanation before it is served. Nothing is copied from any exam, questions rotate by how often they have been seen, and they are retired when the objectives change.
