SC-900 Certification Preparation - Entra, Defender, and Purview
This training prepares participants for the SC-900 certification exam: Microsoft Security, Compliance, and Identity Fundamentals. An exam-style questionnaire concludes the day to assess progress and target areas for review.
A recommended entry point for the Microsoft 365 and Security path, SC-900 is also useful before taking more advanced courses such as MS-102, AZ-500, or SC-200.
Is it for you ?
SC-900 is aimed at a wide range of profiles who need to understand Microsoft 365’s security, identity, and compliance architecture, without necessarily being the administrators of these systems.
It is particularly suitable for:
• IT professionals early in their careers or newly assigned to a role involving security or Microsoft 365 administration.
• Information security team members who want a structured overview of Microsoft solutions.
• Compliance, data governance, or privacy officers.
• IT managers leading Microsoft 365 projects without handling day-to-day technical administration.
• Business stakeholders (executive management, legal, human resources, finance) involved in compliance or cybersecurity projects.
Anyone preparing for the SC-900 certification exam: Microsoft Security, Compliance, and Identity Fundamentals.
Prerequisites
General familiarity with Microsoft 365 or Azure is an asset. No advanced technical skills are required to take this training.
What You'll Walk Away With
- ✓ Name and explain the fundamental principles of cybersecurity: Zero Trust, defense in depth, shared responsibility, and GRC frameworks.
- ✓ Distinguish the key functions of Microsoft Entra: Multi-Factor Authentication (MFA), Conditional Access, and Role-Based Access Control (RBAC).
- ✓ Locate Microsoft Defender within the Microsoft 365 ecosystem and understand its role in security incident detection and management.
- ✓ Describe the compliance and data protection mechanisms of Microsoft Purview and Priva: classification, Data Loss Prevention (DLP), retention, and eDiscovery.
- ✓ Assess your progress toward the SC-900 certification using the end-of-day questionnaire and a targeted revision plan.
Training content
SC-900 alternates between structured presentations, guided demonstrations, and contextual scenarios in the form of mini-cases and quizzes. There are no practical labs in this format: the objective is to understand and contextualize Microsoft solutions, not yet to configure them. The day concludes with an SC-900 exam-style quiz with guided correction.
1 Establishing the foundations of cybersecurity and compliance
The fundamental principles that structure security in a cloud environment.
- Shared responsibility model
- Defense in depth and Zero Trust architecture
- Encryption and hashing: data protection mechanisms
- Governance, risk management, and compliance (GRC)
2 Grasping the challenges of digital identity management
Key identity concepts before addressing Microsoft solutions.
- Authentication and authorization: definitions and distinctions
- Identity Providers (IdP) and directory services
- Identity federation and hybrid access
3 Discovering Microsoft Entra and access controls
The essential functions of Microsoft's identity management platform.
- Microsoft Entra ID: identity types and basic architecture
- Multi-Factor Authentication (MFA) and authentication methods
- Conditional Access and Role-Based Access Control (RBAC)
- Introduction to identity protection and governance
4 Exploring Microsoft Defender security solutions
The positioning of Microsoft Defender within the Microsoft 365 ecosystem, at a fundamental level.
- Introduction to the Microsoft Defender portal
- Alerts, incidents, and security signal correlation
- Security posture: definition and basic indicators
5 Understanding compliance with Microsoft Purview and Priva, and validating learning
Microsoft’s compliance and data protection capabilities, followed by a wrap-up of the day.
- Classification and sensitivity labels, Data Loss Prevention (DLP)
- Data retention and records management
- eDiscovery and audit logs
- Microsoft Priva: privacy and personal data protection
- Service Trust Portal: Microsoft transparency resources
- SC-900 exam-style quiz with guided correction
Keep in Mind
Exam assessment and preparation: Validation quiz (25–40 questions) at the end of the day, with correction and justification Structured review of weak areas identified by the group
📌 Practical information
Our training sessions are available as private sessions, delivered in person at your premises, in a virtual format, or in our training rooms according to your needs.
Dates, schedules, language of instruction, and formats are fully customizable for your team.
To schedule a training session or request a proposal, please fill out the request form below and our team will get back to you shortly.