SC-900 Microsoft · Fundamentals

SC-900 practice test

Microsoft Security, Compliance, and Identity Fundamentals. A full SC-900 practice exam across the October 2026 skills outline: security, compliance and identity concepts, Microsoft Entra, Azure and Defender security, Microsoft Sentinel, and Microsoft Purview compliance, with a case study and exhibits.

  • 6 practice tests + challenge test
  • 350 questions
  • 40 questions, 45 min per test
  • Pass at 70%

Take the free SC-900 diagnostic10 questions, no card needed

Free SC-900 sample questions

3 questions from the free diagnostic, with answers and explanations.

Question 1 · Describe security and compliance concepts

Which Zero Trust principle says that every access request must be fully authenticated and authorized, using all available signals?

  1. Verify explicitly
  2. Assume breach
  3. Use least privilege access
  4. Trust the internal network
Show answer

Answer: A (Verify explicitly)

Verify explicitly means checking identity, location, device and other signals on every request.

Question 2 · Define identity concepts

Which statement correctly compares authentication and authorization?

  1. Authentication proves identity; authorization grants access
  2. Authorization proves identity; authentication grants access to resources
  3. They are the same step in the sign-in process
  4. Authentication is only used for administrator accounts
Show answer

Answer: A (Authentication proves identity; authorization grants access)

You authenticate (prove who you are) and are then authorized (given permission to specific resources).

Question 3 · Describe authentication capabilities of Microsoft Entra ID

Which of these is a passwordless way to sign in to Microsoft Entra ID?

  1. Windows Hello for Business
  2. A password with SMS backup
  3. Security questions
  4. A password manager
Show answer

Answer: A (Windows Hello for Business)

Windows Hello for Business, FIDO2 keys and Authenticator phone sign-in remove the need for a password.

Try the full diagnostic free

What the SC-900 practice covers

Share of practice questions per skill area.

  • Describe core infrastructure security services in Azure12%
  • Describe threat protection with Microsoft Defender XDR12%
  • Describe authentication capabilities of Microsoft Entra ID8%
  • Describe identity protection and governance capabilities of Microsoft Entra8%
  • Describe security management capabilities of Azure8%
  • Describe information protection, data lifecycle management, and data governance8%
  • Describe security and compliance concepts6%
  • Define identity concepts6%
  • Describe function and identity types of Microsoft Entra ID6%
  • Describe access management capabilities of Microsoft Entra ID6%
  • Describe capabilities of Microsoft Sentinel6%
  • Describe compliance management capabilities of Microsoft Purview6%
  • Describe Microsoft Service Trust Portal and privacy principles4%
  • Describe insider risk, eDiscovery, and audit capabilities in Microsoft Purview4%

Question formats

  • Single choice
  • Multiple select
  • Hotspot (drop-down and yes/no)
  • Case studies
  • Exhibits (screenshots, diagrams and code)

Career path: Fundamentals

Cloud, data, AI, security and Power Platform basics for anyone starting out, and for business roles working with technical teams.

  1. AZ-900
  2. DP-900
  3. AI-901
  4. SC-900
  5. PL-900

Guides

SC-900 practice test FAQ

Is there a free SC-900 practice test?

Yes. Create a free account and take the SC-900 free diagnostic: 10 questions across every skill area of the exam, with a study plan for the topics to work on. You can retake it as often as you like.

How many questions are in each ExamKite SC-900 practice test?

Each full practice test has 40 questions with a 45-minute timer, and you pass at 70%. There are 6 practice tests plus a harder challenge test, with 350 questions in total.

Which question formats does the SC-900 practice include?

Single choice, multiple select, hotspot (drop-down and yes/no), case studies and exhibits (screenshots, diagrams and code), the same formats you meet on the real exam.

Are these real SC-900 exam questions?

No. They are original questions written for ExamKite and mapped to the Microsoft skills outline, never copied from the real exam. Using leaked exam questions breaks the certification provider's exam rules and can get your certification revoked.

More answers in the full FAQ.

Ready to practice for SC-900?

Start with the free diagnostic and get a study plan for the topics you miss.

Create a free account