SC-900 Practice Exam — SC-900: Microsoft Security, Compliance, and Identity Fundamentals

1. The question bank is cloud‑connected and updates automatically; no manual re‑acquisition is required.

2. Start practicing right after activating the question bank. It supports simultaneous use on websites and mini‑programs, with one‑click bilingual switching for each question.

3. Functions include online practice, mock tests, note‑taking, wrong‑question recording, etc., valid for one year.

4. Recommended practice order: Turn on review mode to browse questions → Complete sequential practice → Take mock exams for pre‑test self‑assessment.

5. Activation codes can be purchased by clicking Buy Now on the right or via our official Tmall flagship store.

6. For inquiries, contact customer service through mini‑program, WeChat, WhatsApp or LINE.

Exam information

Full Certificate Name

Microsoft Security, Compliance, and Identity Fundamentals

Certification Positioning

Entry-level foundational Microsoft certification covering security, compliance and identity. It is designed for beginners with zero prior experience to learn cloud security concepts, and there are no prerequisites to take the exam.

Exam Specifications

Duration: Approximately 60 minutes

Number of questions: 40–50 (multiple choice, case studies, Yes/No questions, drag-and-drop matching items)

Scoring: Full score of 1000; passing score is 700

Exam fee: Approximately $99 USD

Supported languages: Simplified Chinese, English and more

Official webpage: https://learn.microsoft.com/zh-cn/credentials/certifications/exams/sc-900/

Four Core Exam Domains & Weightings

Describe fundamental concepts of cloud security, compliance, and identity (25–30%)

Describe the identity and access management capabilities of Microsoft Entra ID (formerly Azure AD) (25–30%)

Describe Microsoft security solutions (25–30%)

Describe Microsoft compliance and privacy management solutions (15–20%)

Sample questions

SC-900 · Q1
Topic 1 Question #1 HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: " target="_blank" rel="nofollow noopener">https://www.examtopics.com/assets/media/exam-media/04254/0000200001.png">
  • .

Answer: N|Y|N

Analysis: Statement 1: No, Statement 2: Yes, Statement 3: No. Azure Active Directory is offered in multiple distinct licensing tiers including Free, Premium P1, and Premium P2, each with different feature sets, so the first statement is false. The Azure portal includes a dedicated Azure Active Directory administrative interface for full tenant management, so the second statement is true. Azure Active Directory is a fully managed Microsoft cloud service, so no customer-deployed virtual machines are required to host a tenant, making the third statement false. Key Concept: Azure Active Directory is a cloud-based, managed identity and access management service offered in tiered license editions with no requirement for customer-hosted infrastructure to run a tenant. References: What is Azure Active Directory?, https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/whatis Azure Active Directory feature availability by license
SC-900 · Q2
Topic 1 Question #2 HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: " target="_blank" rel="nofollow noopener">https://www.examtopics.com/assets/media/exam-media/04254/0000300001.png">
  • .

Answer: 微软 Azure 云采用框架

Analysis:
The correct answer is The Microsoft Cloud Adoption Framework for Azure. Azure Blueprints support repeatable compliant Azure resource deployments, Azure Policy enforces organizational resource compliance rules, and resource locks prevent accidental modification or deletion of Azure resources, none of which align with the description provided. The Microsoft Cloud Adoption Framework for Azure is explicitly designed as a centralized collection of guidance, best practices, and tools sourced from Microsoft staff, partners, and real customer experiences to assist organizations with all stages of Azure deployment and cloud adoption.

Key Concept:
The Microsoft Cloud Adoption Framework for Azure is a comprehensive library of proven best practices, guidance, and implementation tools compiled from Microsoft, partner, and customer experience to support successful end-to-end Azure deployment and cloud adoption.

References:
Microsoft Cloud Adoption Framework for Azure overview, https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/overview

SC-900 · Q3
Topic 1 Question #3 HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: " target="_blank" rel="nofollow noopener">https://www.examtopics.com/assets/media/exam-media/04254/0000400001.png">
  • .

Answer: 电子数据发现

Analysis: The correct answer is eDiscovery. eDiscovery capabilities in Microsoft Purview are explicitly designed to identify, place legal holds on, and export electronic content relevant to internal or legal investigations. The other options do not match the described use case: Customer Lockbox controls Microsoft access to customer data, data loss prevention stops accidental sensitive data leakage, and resource locks prevent modification or deletion of Azure resources. Key Concept: eDiscovery is a Microsoft Purview compliance solution that enables organizations to identify, preserve, and export electronic content for use in legal and internal investigation workflows. References: Microsoft Purview eDiscovery solutions, https://learn.microsoft.com/en-us/purview/ediscovery Describe eDiscovery solutions in Microsoft Purview
SC-900 · Q4
Topic 1 Question #4 HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: " target="_blank" rel="nofollow noopener">https://www.examtopics.com/assets/media/exam-media/04254/0000500001.png">
  • .

Answer: Microsoft 终端管理器管理中心

Analysis: The correct answer is Microsoft Endpoint Manager admin center. Microsoft Intune is a core component of Microsoft Endpoint Manager, so its primary dedicated management interface is the Microsoft Endpoint Manager admin center. The other options serve unrelated purposes: the Azure Active Directory admin center manages identity and access, the Microsoft 365 compliance center manages data governance and compliance requirements, and the Microsoft 365 Defender portal manages security threat detection and response, so none are used to manage Intune. Key Concept: Microsoft Intune, Microsoft's cloud-based endpoint, device, and application management service, is primarily administered through the Microsoft Endpoint Manager admin center. References: What is Microsoft Intune?, https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune Microsoft Endpoint Manager overview, https://learn.microsoft.com/en-us/mem/endpoint-manager-overview
SC-900 · Q5
Topic 1 Question #5 HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: " target="_blank" rel="nofollow noopener">https://www.examtopics.com/assets/media/exam-media/04254/0000500003.png">
  • .

Answer: 信任关系

Analysis: The correct answer is a trust relationship. Federation in identity management creates a trusted link between separate organizational identity systems, so users from one organization can authenticate to resources in the other using their existing home credentials. The other options are incorrect: multi-factor authentication is an extra verification step for user logins, user account synchronization replicates user accounts between directories without relying on federation, and a VPN connection is a secure network access tool unrelated to identity federation. Key Concept: Identity federation is a mechanism that establishes mutual trust relationships between disjointed identity providers to enable secure cross-organizational resource access using a single user identity. References: What is federation in Azure Active Directory?, SC-900 Study Guide: Microsoft Security, Compliance, and Identity Fundamentals, https://learn.microsoft.com/en-us/certifications/resources/study-guides/sc-900

FAQ

How many practice questions are available for SC-900?

This question bank includes 252 SC-900 practice questions covering single and multiple choice, each with answers and explanations.

Are SC-900 practice questions available in Chinese and English?

Yes, SC-900 practice questions are provided in both Chinese and English.

Can I try SC-900 practice questions for free?

Yes. Free sample questions are available on this page, and the full question bank is available after signing up on Zhangxuetu.