SC-900 logo
Focused certification exam prep
Start practice

SC-900 Passing Score 2026: Exactly What You Need to Pass

TL;DR
  • The SC-900 passing score is 700 out of a 1000-point scale, not a raw 70% correct.
  • Exact scored item counts aren't disclosed; Microsoft's typical exam range is 40-60 items.
  • Microsoft security solutions carries the heaviest weight at 35-40%, so it drives more of your scaled score.
  • Testing time is 45 minutes inside a 65-minute appointment - budget accordingly.

The Actual Passing Score Number

If you've searched "SC-900 passing score," you want one number, and here it is: 700 out of a possible 1000 on the scaled scoring system Microsoft uses across its role-based and fundamentals exams. This is the official threshold for Microsoft Certified: Security, Compliance, and Identity Fundamentals - not a percentage, not a letter grade, and not something you can eyeball from how many questions "felt right" as you clicked through the test.

This number applies specifically to SC-900, the fundamentals exam covering security, compliance, and identity concepts across Microsoft Entra, Microsoft security solutions, and Microsoft compliance solutions. It has nothing to do with other certifications that happen to share the "SC-900" label in casual conversation - if you're researching this exam, make sure every source you read is talking about the Microsoft credential and not a different program entirely.

Quick Fact: Microsoft does not publish the exact number of scored questions on SC-900, but exams across the Microsoft catalog typically fall in the 40-60 item range. That range is Microsoft-wide, not an exam-specific guarantee for SC-900.

Why 700/1000 Isn't "70% Correct"

The single biggest misconception candidates carry into test day is treating 700/1000 as equivalent to answering 70% of questions correctly. It isn't. Microsoft's scaled scoring model weighs items differently based on difficulty and the skill they measure. Some questions may count more toward your final score than others, and Microsoft has not disclosed which items are scored versus unscored (if any unscored items exist on this particular exam).

This matters practically: you cannot calculate "how many I can afford to miss" by simple arithmetic. Getting a handful of harder, more heavily weighted items wrong in a strong domain like Microsoft security solutions could matter more than missing several lower-weight items elsewhere. The safest approach is not to chase a magic number of allowable wrong answers - it's to build genuinely even competence across all four domains so no single weak spot drags your scaled score below 700.

Key Takeaway

Don't try to reverse-engineer "how many I can miss." Study to be solid across every domain instead of gambling on which questions are worth more.

How Domain Weighting Affects Your Score

While Microsoft doesn't publish a question-by-question scoring formula, the published domain weightings are the closest thing you have to a map of where your scaled score is earned. The four domains for SC-900 are:

DomainWeightScoring Impact
Describe the concepts of security, compliance, and identity10-15%Smallest weight - foundational vocabulary and shared responsibility concepts
Describe the capabilities of Microsoft Entra25-30%Second-largest - identity, access management, governance
Describe the capabilities of Microsoft security solutions35-40%Largest domain - carries the most scoring weight on the exam
Describe the capabilities of Microsoft compliance solutions20-25%Third-largest - Purview, data governance, risk features

Because Microsoft security solutions represents 35-40% of the exam, it has the greatest single influence on whether your scaled result lands above or below 700. A candidate who is excellent at identity concepts but shaky on Defender, Sentinel, and related security capabilities is taking on more risk than the weighting might suggest at first glance. For a full breakdown of what each domain actually tests, the SC-900 Exam Domains 2026: Complete Guide to All 4 Content Areas walks through every subtopic in detail.

Microsoft Security Solutions (35-40%)

Because this is the largest domain, weak understanding here has the biggest downside for your scaled score. Candidates must understand security capabilities at a conceptual level, including how Microsoft's security tools work together.

  • Extended detection and response concepts
  • Security information and event management concepts
  • Cloud security posture and workload protection ideas
  • How these solutions relate to Azure and Microsoft 365 environments

Microsoft Entra (25-30%)

The second-heaviest domain. Identity is the backbone of the "SCI" in SC-900, and Entra capabilities show up across multiple question contexts, not just one isolated section.

  • Authentication and access management fundamentals
  • Identity governance concepts
  • External identity capabilities

Question Format and the 45-Minute Clock

SC-900 gives you 45 minutes of actual testing time inside a standard 65-minute appointment window, which also covers check-in, the exam agreement, and a post-exam survey. Delivery is proctored and computer-based through Pearson VUE, with Certiport listed as an alternate channel for students and educators. The exact mix of question types isn't fully disclosed, but expect interactive item formats alongside traditional multiple choice - scenario-based prompts, drag-and-drop matching, and best-answer selection are all plausible on a fundamentals-level Microsoft exam.

There is no in-exam access to Microsoft Learn documentation, so you cannot look anything up mid-test. Everything you need to hit 700 has to already be in your head when the clock starts. If you're unsure how the pacing and pressure actually feel in practice, How Hard Is the SC-900 Exam? Complete Difficulty Guide 2026 covers the difficulty profile in more depth, and running full-length simulations on a practice test platform before your appointment is the best way to get comfortable with the timing.

Registration Note: The official U.S. checkout fee for SC-900 isn't consistently verified across sources; a commonly cited third-party reference figure is US$99, but regional taxes and discounts can change your actual total. Check the exact fee mechanics at registration rather than relying on a remembered number - the SC-900 Certification Cost 2026: Complete Pricing Breakdown article covers what's actually confirmed versus what's just commonly repeated.

Mapping Study Time to the Passing Threshold

Since 700/1000 rewards balanced competence rather than mastery of one favorite topic, your prep schedule should mirror the domain weights instead of your personal interests. If you already know Azure or Microsoft 365 reasonably well - which Microsoft recommends as helpful background, though it's not a formal prerequisite - you can move faster through the concepts domain and spend more time where the score is actually won.

Week 1

Foundational Concepts

  • Shared responsibility model and Zero Trust principles
  • Core security, compliance, and identity vocabulary
Week 2

Microsoft Entra

  • Authentication methods and conditional access concepts
  • Identity governance and external identities
Week 3

Microsoft Security Solutions

  • Extra time here given the 35-40% weight
  • Detection, response, and posture management concepts
Week 4

Microsoft Compliance Solutions + Full Review

Notice the extra week weight isn't accidental - it mirrors the domain percentages rather than treating all four sections equally. For a broader look at pacing, resource selection, and how to sequence review sessions, see the SC-900 Study Guide 2026: How to Pass on Your First Attempt. If you'd rather see the raw likelihood of clearing 700 on a first sitting before committing to a schedule, SC-900 Pass Rate 2026: What the Data Shows puts what's actually known (and not known) about outcomes into context.

What Happens If You Miss the Score

Missing 700 doesn't disqualify you from ever holding the credential - you can retake the exam, though you'll want to review your score report for domain-level feedback if one is provided, and target the weakest area before rescheduling. Because this is a fundamentals-level certification with no formal degree, prior certification, employment, or training-hour requirement listed, there's nothing standing between a failed attempt and a well-prepared retake. Microsoft does recommend familiarity with Azure and Microsoft 365 concepts going in, but that's guidance, not a gatekeeping requirement - details are covered in SC-900 Requirements 2026: Eligibility, Prerequisites & How to Qualify.

One point worth remembering: once you do clear 700, the SC-900 fundamentals credential does not expire and carries no renewal assessment or continuing-education obligation. The passing score is a one-time hurdle, not a recurring one. That permanence is part of why many candidates treat it as a low-risk entry point before pursuing role-based Microsoft certifications - a decision explored further in Is the SC-900 Certification Worth It? Complete ROI Analysis 2026.

Key Takeaway

A failed attempt isn't a wasted attempt - use the domain feedback to target the exact section (usually Microsoft security solutions, given its weight) before you retest.

FAQ

Is the SC-900 passing score really 700, or is that just a rumor?

700 out of 1000 is the confirmed passing score for Microsoft Certified: Security, Compliance, and Identity Fundamentals. It uses Microsoft's standard scaled scoring system rather than a raw percentage.

Does 700/1000 mean I need to get 70% of questions correct?

No. The scaled score weighs questions differently based on difficulty and skill area, and Microsoft hasn't disclosed the exact scoring formula or which items count more. Treat 700 as a scaled threshold, not a raw percentage target.

How many questions are on the SC-900 exam?

The exact scored question count isn't publicly disclosed for SC-900. Microsoft-wide exams typically fall in the 40-60 question range, but that's a general pattern, not an SC-900-specific guarantee.

Which domain should I worry about most for hitting the passing score?

Microsoft security solutions carries the heaviest weight at 35-40%, making it the domain most likely to influence whether you clear 700. Entra follows at 25-30%, and compliance solutions at 20-25%.

If I fail SC-900, do I lose progress toward the passing score?

There's no cumulative scoring across attempts - each sitting is scored independently against the 700 threshold. You can review your weak domains and retake the exam without any formal prerequisite blocking a second attempt.

Ready to pass your SC-900 exam?

Put this into practice with free SC-900 questions across every exam domain.