Microsoft / Foundational / SC-900
Security, Compliance and Identity Fundamentals
Recognize which Microsoft control addresses identity, infrastructure threats, detection or data compliance.
Targets Microsoft’s published October 21, 2026 update. If sitting earlier, compare your current booking outline. Fundamentals describe capabilities; implementation depth is available in the SC-300 and SC-500 paths.
THE REVISION PATH
Your topics, in order.
Read. Recall. Explain the alternative.
Security Principles and Controls
Protect the right property with the right kind of control.
Entra Identity, Authentication and Governance
Prove who, decide what, review why access continues.
Azure Infrastructure and Cloud Posture
Filter traffic, protect secrets, find exposure.
Defender XDR, Sentinel and Threat Operations
XDR connects product signals; SIEM connects the wider evidence.
Purview, Retention, Discovery and Trust
Classify, protect, retain, investigate and prove.
How this guide is organised
Original revision notes arranged around practical decisions. The linked official objectives define the mapped scope; primary documentation supports the explanations. Read each topic, answer without looking, then explain why another option would fail.
- Official exam guide ↗ Scope authority
Revision material supports preparation; it does not guarantee every possible exam question. Check the exam version and official objectives before booking.