SC-900 Practice Exam: Security, Compliance, and Identity Fundamentals
Security concepts, identity with Microsoft Entra, Microsoft Defender, Sentinel and compliance with Microsoft Purview: 310 original questions with detailed explanations, smart review and progress tracking. Independent prep resource, not affiliated with Microsoft.
SC-900 exam domains
Why practice with EarnYourCert
SC-900 sample questions
Five real questions from our 310-question bank. Try to answer before revealing the solution.
1. Why is identity often called the new security perimeter?
- Because firewalls are no longer needed once all users have cloud identities assigned
- Because identities replace encryption, so data no longer needs to be protected at rest
- Because people and devices access resources from anywhere, so access depends on who asks
- Because passwords are never used anymore, so network location is the only remaining control
Show answer
Correct answer: C. With remote work and cloud apps, the network edge no longer defines trust; verifying identity does.
2. Which Microsoft Entra product helps discover, remediate and monitor excessive permissions across multicloud environments?
- Entra Domain Services
- Entra Verified ID
- Microsoft Entra Connect Sync
- Microsoft Entra Permissions Management
Show answer
Correct answer: D. Permissions Management is a cloud infrastructure entitlement management (CIEM) solution.
3. Where do security teams manage incidents, alerts, advanced hunting and reports across Defender products?
- The Teams admin center
- The Exchange admin center
- The Microsoft Defender portal
- The Azure Cost Management portal
Show answer
Correct answer: C. The Defender portal (security.microsoft.com) unifies incidents and hunting across the Defender suite.
4. Which Defender for Endpoint feature prioritizes software vulnerabilities on devices by exploitability and business impact?
- Entra access reviews
- Safe Attachments
- Customer Lockbox
- Defender Vulnerability Management
Show answer
Correct answer: D. Risk-based prioritization considers threat context and asset value.
5. What are sensitive information types (SITs) in Microsoft Purview?
- Patterns, such as credit card numbers, used to detect sensitive content
- Folders that organize email messages by the sensitivity of their content
- Groups of users with elevated rights over sensitive SharePoint sites
- Network routes for sensitive traffic
Show answer
Correct answer: A. SITs use patterns, keywords and confidence levels.
Frequently asked questions
How many questions does the SC-900 practice exam have?
The question bank has 310 original questions. Each practice exam draws 50 questions weighted by domain, just like the official exam.
What's the passing score for SC-900?
Microsoft's official SC-900 exam requires a score equivalent to 70% to pass. We use the same threshold in our practice exams so you train under realistic conditions.
What domains does the SC-900 exam cover?
Four domains: concepts of security, compliance, and identity (10-15%), capabilities of Microsoft Entra (25-30%), capabilities of Microsoft security solutions (35-40%), and capabilities of Microsoft compliance solutions (20-25%).
Is the SC-900 practice exam free?
Yes, you can practice for free without signing up. Creating a free account adds progress tracking and smart review (SRS); the Pro tier removes daily question limits.
Are these the official Microsoft exam questions?
No. These are original questions written based on Microsoft's official "Skills measured" guide for SC-900, not extracts from the real exam or "exam dumps".