Build Your Foundation in Microsoft Security
Complete preparation for the SC-900 exam covering Microsoft security, compliance, and identity fundamentals.
About This Course
The SC-900 is where most people start their Microsoft Security journey, and for good reason. This course covers the full scope of security, compliance, and identity concepts that Microsoft tests on the fundamentals exam. You will learn how Microsoft Entra ID handles authentication, how Defender products protect across endpoints and cloud apps, and how Purview manages data governance and compliance.
This is not a surface-level overview. Each module maps directly to the SC-900 exam objectives, with real demonstrations of the Azure portal, Microsoft 365 Defender portal, and Purview compliance portal. You will see how these services connect in practice, not just in theory.
If you are new to Microsoft Security or moving from another domain, this course gives you the vocabulary, context, and hands-on familiarity you need before pursuing intermediate certifications like the SC-200, SC-300, or AZ-500.
What You'll Learn
Describe core concepts of security, compliance, and identity across Microsoft services
Explain the capabilities of Microsoft Entra ID for identity and access management
Understand Microsoft Defender, Sentinel, and Purview at a foundational level
Identify compliance features including data classification, retention, and insider risk
Prerequisites
- No prior security experience required — the course starts from the fundamentals
- Basic familiarity with cloud concepts is helpful but not required
Who Is This Course For
This course is built for IT professionals, career changers, and anyone entering the Microsoft Security ecosystem. Whether you are a helpdesk admin looking to move into security, a project manager who needs to understand compliance tooling, or a student preparing for your first Microsoft certification, the SC-900 gives you the foundational knowledge required to speak the language and pursue more advanced security roles.
What's Inside
Security Concepts and Methodologies
- Zero Trust principles and defense in depth
- Shared responsibility model in cloud environments
- Common threat types and attack vectors
- Encryption, hashing, and digital certificates
Microsoft Entra ID and Identity
- Authentication methods including MFA and passwordless
- Conditional Access policies and identity protection
- Roles, administrative units, and identity governance
- External identities and B2B collaboration
Microsoft Security Solutions
- Microsoft Defender for Endpoint, Office 365, and Cloud Apps
- Microsoft Sentinel SIEM and SOAR capabilities
- Microsoft Defender for Cloud security posture management
- Threat indicators and automated investigation
Compliance and Data Governance
- Microsoft Purview information protection and DLP
- Retention policies and records management
- Insider risk management and communication compliance
- Compliance Manager and regulatory assessments