SC-900 study resources
The best SC-900 resources are free: Microsoft’s study guide with the skills outline, the official practice assessment and sandbox, and the product documentation for each area. Add realistic practice questions to find your weak area. Be careful with old material, because Microsoft renamed many of these products (for example, Azure Active Directory became Microsoft Entra ID, and the compliance portal moved into Microsoft Purview), and older courses use the previous names.
Start with the official material
| Resource | Use it for |
|---|---|
| Exam SC-900 study guide | The skills measured with weights, the change log and links to documentation |
| Official exam page | Free self-paced learning paths and modules, scheduling, languages and policy |
| Free practice assessment | Question style and your weak areas |
| Exam sandbox | The exam interface and question types |
Check the date on the study guide. The English outline changes on October 21, 2026, so use the version that matches your exam date.
Documentation worth reading
Microsoft’s study guide itself points to these areas of the documentation, and they map directly to the skill areas:
- Microsoft security documentation for Zero Trust and the overview material.
- Azure security documentation for the infrastructure services in the security solutions area.
- Microsoft Entra ID documentation for the identity area.
- Microsoft Sentinel documentation for SIEM and SOAR.
- Microsoft Purview documentation and the Service Trust Portal introduction for the compliance area.
You do not need to read it all. Use it as a lookup when a practice question uses a feature you cannot place.
Hands-on
Hands-on work is optional for a fundamentals exam but speeds up learning. A Microsoft 365 or Azure trial tenant lets you open the Entra admin center, the Microsoft Defender portal and the Purview portal and see where features live. Look, do not configure; the exam never asks for steps.
Practice questions
Use the free 20-question practice test and the sample questions here, then the official assessment. After each set, log wrong answers by skill area and revisit that guide. The skills outline page and the glossary cover reading an outline and key terms.
What to skip
- Exam dumps. They are against Microsoft’s exam policy and often wrong or outdated.
- Courses that teach products under their old names without a note on the rename.
- Deep configuration tutorials. SC-900 is about what each product is for.
Pair this with the study plan so each resource has a week.