Skip to content
Ready now

SC-900 practice test

Microsoft Security, Compliance and Identity Fundamentals

100 practice questions, spread across the exam's topics the same way Microsoft weights them, each with a full explanation and a link to the official documentation that proves the answer. Written by a Microsoft Certified Trainer who does this work for a living.

100Questions
10Free
$29One payment
700Score needed to pass

No card needed to start, and none to keep going: buying is not open yet.

Someone studying for the SC-900 exam

What is inside

Every area the exam tests

Our questions are spread the same way Microsoft weights the exam, so your practice matches the real thing.

Security, compliance and identity concepts

10 to 15%

Shared responsibility, defence in depth, Zero Trust, encryption, and what identity means.

13 questions

Microsoft Entra capabilities

25 to 30%

Identity types, authentication methods, Conditional Access, roles, governance and protection.

27 questions

Microsoft security solutions

35 to 40%

Azure infrastructure security, Defender for Cloud, Sentinel, and the Defender XDR services.

37 questions

Microsoft compliance solutions

20 to 25%

Service Trust Portal, Purview, information protection, data lifecycle and insider risk.

23 questions

Microsoft last updated this exam on 21 October 2026. Our questions match that version.

For a week-by-week plan across these topics, read the SC-900 study guide.

How you will use it

Practise the way that suits you

  • Learn as you go. Answer, read why straight away, then move on. No clock, no pressure.
  • Or sit it timed. A clock, no answers until the end, and two minutes a question, so you learn to pace yourself.
  • Score by topic. See which area let you down instead of one number out of a hundred.
  • Go back over it. Read every question again afterwards, right and wrong, with the full explanation.
Someone reviewing their practice test results

Is it for you

Who takes SC-900

People new to Microsoft cloud

The shortest route to understanding what the security products are for.

Non-technical roles in technical organisations

Sales, procurement and project work all need this vocabulary and not the depth.

Anyone starting the security path

It is where SC-200 and SC-300 assume you already are.

See the questions before you pay

10 SC-900 questions with full explanations, so you can judge the quality yourself.

Start 10 free questions