SC-900: Security, Compliance and Identity Fundamentals Exam Preparation
Microsoft's SC-900 Fundamentals exam tests a candidate's grasp of security, compliance and identity concepts across the Microsoft ecosystem: zero trust and shared responsibility thinking, how Microsoft Entra ID handles authentication and access, what the Defender family of security products actually cover, and what Microsoft Purview offers for compliance and information protection. It is a common entry point for IT, helpdesk and junior security or compliance staff who need the vocabulary and the concepts before they touch any one product in depth.
This is exam preparation, not an authorised Microsoft training programme; Orbix is not affiliated with Microsoft, and candidates register for and sit the SC-900 exam directly through Microsoft's own channels. The day works through the exam's skill areas in sequence, with checkpoint questions after each and a closing timed practice assessment built to the exam's actual format. It complements rather than replaces the hands-on security and governance courses elsewhere in the catalogue: this course stays at the Microsoft product-concept level the exam tests, not at the operational depth of a dedicated security operations programme. Candidates who also want the general Microsoft 365 fundamentals should pair this with MS-900: Microsoft 365 Fundamentals Exam Preparation.
HRD Corp SBL-Khas Claimable
Programme Agenda
9:00 AM - 9:15 AM
Welcome and Programme Overview
Introduction to the session, objectives, and housekeeping.
9:15 AM - 10:15 AM
Security, Compliance and Identity Concepts
Zero trust and defence in depth thinking, the shared responsibility model carried over from the cloud concepts the exam assumes, encryption and hashing at a conceptual level, and the common compliance vocabulary, including regulatory compliance and information protection, the exam expects a candidate to recognise.
10:15 AM - 10:30 AM
Break
10:30 AM - 11:30 AM
Microsoft Entra Identity and Access Management
Authentication versus authorisation, the Microsoft Entra ID directory at a fundamentals level, authentication methods including multifactor authentication and passwordless sign-in, conditional access concepts, and identity governance ideas such as access reviews and entitlement management.
11:30 AM - 12:30 PM
Microsoft Security Solutions
An overview of the Defender family, including Defender for Office 365, Defender for Endpoint, Defender for Identity and Defender for Cloud Apps, Microsoft Sentinel's role as a security information and event management and orchestration tool, and Microsoft's exposure management concept, at the breadth the exam expects rather than hands-on configuration.
12:30 PM - 1:30 PM
Lunch
1:30 PM - 3:15 PM
Microsoft Compliance Solutions
Microsoft Purview's compliance capabilities at a fundamentals level: information protection and data lifecycle management, insider risk management, eDiscovery, compliance manager and audit, and how these concepts map to the regulatory language compliance teams already use.
3:15 PM - 3:30 PM
Break
3:30 PM - 4:45 PM
Exam Readiness and Practice
The SC-900 exam format and question types, time management, and a full practice run mapped to the exam's four skill areas with wrong answers discussed in the room rather than left for self-study.
4:45 PM - 5:00 PM
Wrap-Up and Q&A
Key takeaways, next steps, and close.
Key Outcomes
- Explain core security, compliance and identity concepts
- Describe Microsoft Entra ID's identity and access management capabilities
- Describe Microsoft's security solutions at a conceptual level
- Describe Microsoft's compliance solutions at a conceptual level
- Complete a timed practice assessment mapped to the SC-900 exam skill areas
- Leave with a personal, dated study plan for sitting the SC-900 exam
Training Mode Physical / Online / Hybrid / e-learning
HRD Corp SBL-Khas Claimable
Level Foundation. For IT support, and security-adjacent or compliance-adjacent staff preparing to sit the Security, Compliance and Identity Fundamentals (SC-900) exam. No prior security administration experience required.
Duration 1 Day (8 Hours) | 9:00 AM to 5:00 PM
Venue In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)
Assessment Domain checkpoint questions after each module, plus a scored timed practice assessment mapped to the SC-900 exam skill areas with an individual study plan
Certificate Certificate of Completion issued to all participants upon full attendance