SC-900: Microsoft Security, Compliance, and Identity Fundamentals

It covers the conceptual fundamentals across Microsoft's security ecosystem — Entra ID for identity, Purview for compliance, Defender for threat protection — mirroring the exam's skills outline. Because Microsoft maintains it, the terminology matches test day and it stays current automatically.

It is conceptual, not hands-on security engineering, so it will not teach you to configure or defend systems, and if you do not plan to sit the exam a broader security intro may suit you better. As the official source it is kept updated.

SC-900 is Microsoft's entry-level security certification, covering the conceptual fundamentals of security, compliance, and identity management across Microsoft's security product ecosystem: Microsoft Entra ID (identity and access management), Microsoft Purview (compliance and data governance), and Microsoft Defender (threat protection). This official Microsoft Learn path mirrors the exam's skills outline directly.