About this book

SC-900 study guide with hundreds of interactive exam questions

Preparing for Microsoft Exam SC-900: Microsoft Security, Compliance, and Identity Fundamentals with little or no security experience? This book covers every exam domain (Describe the concepts of security, compliance, and identity, Describe the capabilities of Microsoft Entra, Describe the capabilities of Microsoft security solutions, and Describe the capabilities of Microsoft compliance solutions) in plain language. You can then test yourself on each topic with interactive exam questions and instant feedback.

Some concepts often trip candidates up: the Zero Trust model, Conditional Access, Privileged Identity Management, SIEM versus SOAR, and sensitivity labels versus retention labels. The book explains each of them step by step and reinforces them with full-color diagrams.

What's inside

  • One chapter per SC-900 exam domain, from core security and identity concepts to Microsoft Purview compliance

  • Exam questions in the formats Microsoft exams use: multiple choice with one or several answers, drag-and-drop and ordering, plus fill-in-the-blank and true/false

  • Instant feedback on every answer, so you know what to review before exam day

  • A glossary of key terms with flashcards, from access reviews to Zero Trust

  • Real-world scenarios showing how Microsoft Entra, Defender, Sentinel and Purview are used in practice

  • Read cover to cover, or jump straight to your weakest topic

Who it's for

SC-900 is for business stakeholders, new or existing IT professionals, and students who want to understand how Microsoft's security, compliance, and identity solutions work together across Azure and Microsoft 365. It's also a solid first step before role-based security certifications.

FAQ

Do I need prior experience? No security background is needed; the book starts from the basics and builds up. Microsoft does assume general familiarity with Azure and Microsoft 365, and the book explains each service as it comes up.

Does it cover the current SC-900 syllabus? Yes. The chapters follow Microsoft's official SC-900 skills outline. Check the study guide below for the latest objectives.

Is it enough to pass? It covers every exam domain and gives you hundreds of questions to practice with. Combine it with Microsoft's free practice assessment to confirm you're ready.

Official Microsoft resources

Brixus is not affiliated with or endorsed by Microsoft. Microsoft, Azure, Microsoft Entra, Microsoft Purview and SC-900 are trademarks of the Microsoft group of companies.

Preview

Describe security and compliance concepts

Free sample questions

A free sample of this book's exam questions — no account needed.

Question 1 / 200 / 20 answered
In every Azure cloud deployment type, the organization is responsible for securing its information and data.
TrueFalse
Which three statements correctly describe Zero Trust guiding principles?
Select all that apply
Fill in the blank
The operation that turns a file's contents into a form readable only by holders of the proper key is the file.
Sort the cloud models from greatest customer duty to smallest customer duty under shared responsibility.
1.platform as a service (PaaS)
2.software as a service (SaaS)
3.infrastructure as a service (IaaS)
4.on-premises datacenter
Link each Zero Trust pillar to its corresponding demand.
Needs to be confirmed through robust authentication
Needs to be categorized, tagged, and encrypted according to its properties
Needs to be divided into segments
Data
Drop items here
Identities
Drop items here
Networks
Drop items here
In software as a service (SaaS), the organization is responsible for applying service packs to applications.
TrueFalse
You intend to adopt a security approach that positions several defensive layers across network infrastructure. Which methodology is this?
Select one answer
Fill in the blank
integrity.
Confirming that retrieved data matches what was stored demonstrates preservation of Drop here
In infrastructure as a service (IaaS), the cloud provider is responsible for managing the physical network.
TrueFalse
A cloud app will be managed by you only for its data, user accounts, and user devices. Which cloud model fits that plan?
Select one answer
Fill in the blank
During sign-in, checks the supplied credentials to confirm identity.
Symmetric encryption employs a paired public key and private key.
TrueFalse
Under the shared responsibility model for Azure, what is solely Microsoft's duty to manage?
Select one answer
Fill in the blank
For authentication and authorization, Microsoft Entra ID acts as .
Asymmetric encryption employs a paired public key and private key.
TrueFalse
Under the software as a service (SaaS) cloud model, which area remains the customer's duty when reviewing security?
Select one answer
Fill in the blank
federation.
Single sign-on (SSO) arranged across several identity providers exemplifies Drop here
Decryption can recover source material from its content hash.
TrueFalse
Under the shared responsibility model, what stays Microsoft's duty for Azure virtual machines?
Select one answer
Fill in the blank
When people sign in to the Azure portal, the first thing that happens to them is that they are
Answer to continue

What's inside

4 chapters • 15 pages

Reviews

No reviews yet.