Docker Certified Associate – Preparation & methodology
Preparing for the Docker Certified Associate (DCA) exam is an achievable goal with the right plan, focused practice, and high-quality mock exams.
Microsoft
Microsoft Security, Compliance, and Identity Fundamentals
The Microsoft SC-900 exam certifies individuals as Microsoft Certified: Security, Compliance, and Identity Fundamentals. It is an entry-level certification validating foundational knowledge of core security, compliance, and identity (SCI) concepts, particularly as they apply to Microsoft Azure and Microsoft 365.
Exam code
SC-900
Official Prerequisites
- Basic understanding of cloud computing concepts (IaaS, PaaS, SaaS)
- Familiarity with core security concepts (confidentiality, integrity, availability)
- Knowledge of identity basics (authentication, authorization, single sign-on)
- Awareness of compliance and governance principles, common regulations (GDPR, HIPAA)
- Experience navigating Microsoft 365 or Azure portals is helpful but not required
Targeted Professions
IT Help Desk Technician Security Analyst Compliance Officer Cloud Administrator Identity AdministratorDomain blueprint
ExamBoot simulation engine is synchronized with official exam outline. Our adaptive question banks prioritize your reaching your objectives quickly..
Understand foundational security concepts and how they apply to services such as Microsoft Azure and Microsoft 365.
Learn about identity principles and capabilities offered by Azure Active Directory and other Microsoft identity solutions.
Explore security management solutions, as well as threat protection with tools like Microsoft Defender.
Understand the compliance capabilities in Microsoft 365, including information protection and governance.
Covers foundational SCI principles: shared responsibility, defense-in-depth, Zero Trust, encryption and hashing, governance, risk, and compliance, identity, authentication, authorization, federation, and identity providers.
Domain 5
Describe the concepts of security, compliance, and identity
Covers foundational SCI principles: shared responsibility, defense-in-depth, Zero Trust, encryption and hashing, governance, risk, and compliance, identity, authentication, authorization, federation, and identity providers.
Domain 6
Describe the capabilities of Microsoft Entra
Focuses on Microsoft Entra ID: identity types (cloud, hybrid, external), authentication methods, multifactor authentication, password protection, access management including RBAC and Conditional Access, and identity protection and governance features like access reviews, Privileged Identity Management, and Entra ID Protection.
Domain 7
Describe the capabilities of Microsoft security solutions
Examines Azure security controls and Microsoft security offerings: infrastructure security (e.g. DDoS protection, firewalls, virtual networks, Key Vault, Bastion), security management tools like Microsoft Defender for Cloud, CSPM, Sentinel (SIEM/SOAR), and threat protection via Defender-XDR across endpoints, identity, cloud apps, Office 365.
Domain 8
Describe the capabilities of Microsoft compliance solutions
Covers Microsoft’s compliance offerings: privacy principles and Service Trust Portal, compliance management with Purview (Compliance Manager, compliance score), info protection and governance (data classification, labels, DLP, records and retention), insider risk, eDiscovery and audit capabilities.
Study Tip
Study Microsoft docs and learning paths for SC-900, complete hands-on labs in Microsoft Learn, and practice exam questions under timed conditions.
Blog
Latest from the ExamBoot Blog
Latest news, hands-on guides, and learner success stories from the ExamBoot blog
