Build Your Foundation in Microsoft Security, Compliance & Identity

The Microsoft SC-900 course is designed for students, beginners, business professionals, and IT professionals who want to develop a foundational understanding of security, compliance, and identity across Microsoft cloud services.

This course introduces the core concepts behind Microsoft’s security, compliance, and identity solutions across Microsoft Azure and Microsoft 365. Students will learn how organizations protect identities, applications, data, devices, networks, and cloud environments while maintaining compliance and managing security risks.

The course also provides structured preparation for the Microsoft Security, Compliance, and Identity Fundamentals (SC-900) certification exam.

What You Will Learn

  • Understand fundamental security, compliance, and identity concepts
  • Learn the Zero Trust security model
  • Understand the shared responsibility model
  • Explore Microsoft Entra ID and identity management
  • Learn authentication, authorization, and access management
  • Understand Microsoft security solutions and threat protection
  • Explore Microsoft Defender and Microsoft Sentinel
  • Learn Azure infrastructure security concepts
  • Understand Microsoft Purview and compliance solutions
  • Explore data protection, governance, and privacy
  • Understand risk and compliance management
  • Prepare for the SC-900 certification exam

Course Modules

Module 1 – Security, Compliance & Identity Fundamentals

  • Introduction to security, compliance, and identity
  • Shared responsibility model
  • Defense-in-depth
  • Zero Trust security model
  • Authentication and authorization
  • Identity providers
  • Directory services
  • Active Directory fundamentals
  • Federation concepts
  • Encryption and hashing
  • Governance, Risk, and Compliance (GRC)
  • Security and compliance fundamentals

Module 2 – Microsoft Entra & Identity Management

  • Introduction to Microsoft Entra
  • Microsoft Entra ID
  • Identity types
  • User, device, workload, and agent identities
  • Hybrid identity
  • Authentication methods
  • Multi-Factor Authentication (MFA)
  • Password protection and management
  • Conditional Access
  • Microsoft Entra roles
  • Role-Based Access Control (RBAC)
  • Identity governance
  • Access reviews
  • Microsoft Entra Privileged Identity Management (PIM)
  • Microsoft Entra ID Protection

Module 3 – Azure Security Solutions

  • Azure infrastructure security
  • Azure DDoS Protection
  • Azure Firewall
  • Azure Web Application Firewall (WAF)
  • Azure Virtual Networks
  • Network segmentation
  • Network Security Groups (NSGs)
  • Azure Bastion
  • Azure Key Vault
  • Azure security policies
  • Security recommendations
  • Microsoft Defender for Cloud
  • Cloud Security Posture Management (CSPM)
  • Cloud workload protection

Module 4 – Microsoft Sentinel & Security Operations

  • Introduction to Microsoft Sentinel
  • Security Information and Event Management (SIEM)
  • Security Orchestration, Automation, and Response (SOAR)
  • Security monitoring
  • Threat detection
  • Security analytics
  • Incident investigation
  • Threat mitigation
  • Security automation
  • Microsoft Sentinel use cases

Module 5 – Microsoft Defender XDR

  • Introduction to Microsoft Defender XDR
  • Microsoft Defender portal
  • Microsoft Defender for Office 365
  • Microsoft Defender for Endpoint
  • Microsoft Defender for Cloud Apps
  • Microsoft Defender for Identity
  • Microsoft Defender Vulnerability Management
  • Microsoft Defender Threat Intelligence
  • Threat detection and response
  • Coordinated security across Microsoft services

Module 6 – Microsoft Compliance & Privacy

  • Introduction to Microsoft compliance solutions
  • Microsoft Service Trust Portal
  • Microsoft privacy principles
  • Compliance requirements
  • Regulatory and organizational compliance
  • Microsoft Purview
  • Compliance Manager
  • Compliance Score
  • Compliance assessments
  • Managing compliance risks

Module 7 – Microsoft Purview & Information Protection

  • Microsoft Purview portal
  • Data classification
  • Information protection
  • Sensitivity labels
  • Sensitivity label policies
  • Data Loss Prevention (DLP)
  • Data governance
  • Data lifecycle management
  • Records management
  • Retention policies
  • Retention labels
  • Content Explorer
  • Activity Explorer

Module 8 – Insider Risk, eDiscovery & Auditing

  • Insider Risk Management
  • Identifying insider risks
  • Microsoft Purview eDiscovery
  • Investigating organizational data
  • Audit solutions
  • Audit logs
  • Security and compliance investigations
  • Data governance and regulatory requirements

Module 9 – Security & Compliance in Microsoft 365

  • Microsoft 365 security fundamentals
  • Identity protection
  • Data protection
  • Device and application security
  • Threat protection
  • Compliance management
  • Security and compliance dashboards
  • Microsoft security ecosystem
  • Integrating security and compliance solutions

Module 10 – SC-900 Certification Preparation

  • Review of key security concepts
  • Microsoft Entra review
  • Microsoft security solutions review
  • Microsoft compliance solutions review
  • Key Microsoft security terminology
  • Scenario-based questions
  • Practice assessments
  • Knowledge checks
  • Mock exam preparation
  • Final certification review

Who Should Take This Course?

This course is ideal for:

  • Students interested in cybersecurity and cloud security
  • Beginners entering the IT industry
  • Business professionals working with Microsoft technologies
  • IT professionals expanding their security knowledge
  • System and network administrators
  • Microsoft 365 users and professionals
  • Cloud professionals
  • Individuals interested in identity and access management
  • Professionals preparing for the SC-900 certification

Microsoft specifically identifies business stakeholders, new or existing IT professionals, and students as potential SC-900 candidates.

Prerequisites

No advanced cybersecurity experience is required. A general understanding of IT, networking, cloud computing, Microsoft Azure, and Microsoft 365 is recommended.

Course Benefits

By completing this course, students will develop a strong foundation in Microsoft’s security, compliance, and identity ecosystem.

Students will gain knowledge in:

  • Security and Zero Trust principles
  • Identity and access management
  • Microsoft Entra
  • Azure security
  • Microsoft Defender solutions
  • Microsoft Sentinel
  • Microsoft Purview
  • Compliance and governance
  • Data protection and privacy
  • Security monitoring and threat protection

The course also provides structured preparation for the Microsoft SC-900 certification exam.

Certification Exam Preparation

Students will prepare across the four major SC-900 exam areas:

  • Security, Compliance, and Identity Concepts
  • Microsoft Entra Capabilities
  • Microsoft Security Solutions
  • Microsoft Compliance Solutions

Microsoft currently lists a passing score of 700 or greater, with the exam providing 45 minutes to complete the assessment.

Start Your Microsoft Security Journey

Build a strong foundation in Microsoft’s security, compliance, and identity technologies. Develop the knowledge needed to understand modern cloud security and take your next step toward a career in IT and cybersecurity.