SC-900: Security, Compliance & Identity Fundamentals

Security and compliance now touch every IT role and many business ones. Even if you never configure a firewall, you will be asked about multifactor authentication, data protection rules or how an incident was handled. This one-day course explains the core concepts and shows how Microsoft’s security, compliance and identity tools fit together.

The morning covers the foundations: shared responsibility, defence in depth, Zero Trust, encryption, common threats, and the governance, risk and compliance concepts that organisations work within. You then look at identity with Microsoft Entra ID — authentication methods, Conditional Access, identity protection and governance.

The afternoon covers Microsoft security solutions — Azure network security services, Microsoft Defender for Cloud, Microsoft Sentinel and Microsoft Defender XDR — followed by compliance with Microsoft Purview: the Service Trust Portal, Compliance Manager, sensitivity labels, data loss prevention, retention, insider risk and eDiscovery. Short guided tours in each portal keep the ideas concrete.

The final session explains how fundamentals exams are structured and works through practice questions with explanations, so you know exactly which areas to revise.

The course is aligned to the SC-900 exam. Microsoft revises its exam outlines periodically, so check the current skills measured on Microsoft Learn before booking.