What Is A SC-900?

What Is A SC-900, Exactly?

SC-900 is the exam code for Microsoft Certified: Security, Compliance, and Identity Fundamentals, a credential built and maintained by Microsoft Corporation. It exists to confirm that a person understands the foundational vocabulary and structure behind Microsoft's security, compliance, and identity product families - not that they can configure every setting inside them. If you are researching whether this exam fits your career plans, our companion piece What Is SC-900? covers the same question from a slightly different angle, and SC-900 Meaning unpacks why Microsoft chose this naming convention.

Unlike role-based Microsoft certifications that assume hands-on administration experience, SC-900 sits at the "fundamentals" tier. That tier is intentionally broad: it introduces concepts spanning identity governance, threat protection, and regulatory compliance so that a newcomer - a student, a career-changer, or someone in sales, support, or project management - can speak intelligently about these topics without having deployed them in production.

Who Issues It and How You Take the Exam

Microsoft owns SC-900, and the exam is delivered through two channels: Pearson VUE for the general public, and Certiport for students and educators who go through academic testing centers. Both are proctored, computer-based delivery formats, and the exam may be taken remotely where remote proctoring is supported in your region.

On pricing, be careful with numbers you find online. The current official U.S. checkout fee is not something we can verify with certainty here; a commonly cited figure of US$99 circulates as a third-party reference point, but it is not a confirmed Microsoft price, and taxes or regional adjustments can change what you actually pay at checkout. There is no member versus non-member pricing structure for this exam. For a deeper breakdown of what actually factors into your total cost, see SC-900 Certification Cost 2026: Complete Pricing Breakdown.

There are no enforced prerequisites - no degree, no prior certification, no minimum employment or training hours. Microsoft does recommend familiarity with basic Azure and Microsoft 365 concepts before sitting the exam, since many scenario-based questions assume you recognize these platforms by name. If you want a full list of what "recommended" versus "required" actually means here, read SC-900 Requirements 2026: Eligibility, Prerequisites & How to Qualify.

The Four Domains Inside the Exam

SC-900 content is organized into four domains, each carrying a different weight toward your final score. Understanding these weights is the single most useful thing you can do before you start studying, because it tells you exactly where to spend your time. For a full domain-by-domain breakdown with sub-topics, see SC-900 Exam Domains 2026: Complete Guide to All 4 Content Areas.

Question Style and Exam Format

SC-900 is a fundamentals-level exam, so questions test recognition and conceptual understanding rather than deep configuration steps. You won't be asked to write PowerShell scripts or troubleshoot a live Conditional Access policy. Instead, expect to:

• Match a Microsoft product or feature name to the capability it provides
• Identify which pillar (identity, security, or compliance) a described scenario belongs to
• Distinguish between similarly named services, like Microsoft Defender for Cloud Apps versus Microsoft Defender for Endpoint
• Interpret short scenario descriptions and choose the best-fit Microsoft solution

Microsoft has not publicly disclosed the exact total number of questions or how many are scored versus unscored. Across Microsoft's certification portfolio more broadly, exams commonly fall somewhere in a 40-60 question range, but that is a general pattern across Microsoft exams, not a guarantee specific to SC-900. There is no in-exam access to Microsoft Learn documentation, so terminology needs to be memorized rather than looked up during the test. For a candid assessment of how challenging this actually feels in practice, read How Hard Is the SC-900 Exam? Complete Difficulty Guide 2026.

Who Actually Hires For This Credential

Because SC-900 is explicitly a fundamentals credential, it is rarely the sole qualifying factor for a job posting. Instead, it functions as a signal - proof that a candidate understands baseline security, compliance, and identity terminology well enough to communicate with specialist teams. In practice, that shows up in a few recurring hiring contexts:

• IT support and helpdesk roles where staff need to recognize identity and security terminology when escalating tickets
• Sales, presales, and customer success positions tied to Microsoft security or compliance products, where credibility with technical buyers matters
• Compliance and governance teams that need staff conversant in Microsoft Purview concepts without being deep technical administrators
• Students and career-changers using it as a stepping stone toward associate-level Microsoft security certifications

If you're weighing whether the credential translates into measurable career or income impact, our analyses in SC-900 Salary Guide 2026: Complete Earnings Analysis and Is the SC-900 Certification Worth It? Complete ROI Analysis 2026 go into that in more depth. For a list of job titles where this fundamentals badge tends to appear on resumes or job descriptions, see SC-900 Jobs.

Building a Domain-Aware Study Path

A generic weekly study calendar isn't very useful unless it's tied directly to how SC-900 weights its content. The structure below assumes you're studying part-time and allocates time proportionally to each domain's exam weight, front-loading the heaviest domain first while it's freshest.

If you'd rather follow a more detailed, day-by-day version of this approach, our SC-900 Study Guide 2026: How to Pass on Your First Attempt lays out a complete first-attempt strategy. And once you've studied the material, running timed practice questions on our practice test platform is one of the most direct ways to confirm you can apply these concepts under exam conditions rather than just recognize them on a page.

Passing Score, Validity, and What Happens After

SC-900 uses a scaled passing score of 700 out of 1000. That number is not the same as needing 70% of questions correct - different questions can carry different weight in the scaling algorithm, and Microsoft does not publish the exact conversion formula. For a full explanation of how scaled scoring works and what it means for your study targets, see SC-900 Passing Score 2026: Exactly What You Need to Pass.

One detail that surprises some candidates: as a Fundamentals-tier credential, SC-900 does not expire, and there is no renewal assessment or continuing-education requirement to maintain it. Once earned, it stays on your Microsoft certification record indefinitely. That's a meaningful difference from associate and expert-level Microsoft certifications, which typically require periodic renewal.

Also worth flagging: the English-language exam outline is scheduled to take effect on July 28, 2026. If you're studying close to that date, double-check which version of the outline your study materials reflect, since domain weightings or topic emphasis can shift between outline versions. Our SC-900 Exam Dates 2026: Testing Windows, Deadlines & Scheduling page tracks scheduling considerations like this in more detail.

Before you register, it's worth reviewing what "SC-900" means as a full certification package rather than just an exam code - including how it fits into Microsoft's broader certification ladder. Our overview articles SC-900 Certification and What Is SC-900 Certification? both walk through that bigger picture, and What Does SC-900 Stand For? breaks down the naming convention itself if you're still getting oriented. If formal instructor-led options interest you, SC-900 Training reviews what's available. And when you're ready to test your readiness against realistic questions, head over to our practice exams to see where you stand across all four domains before booking your real appointment.

Frequently Asked Questions