73%

of initial access in attacks Microsoft observed came through user actions, valid accounts, social engineering or phishing. Microsoft Digital Defense Report 2026.

Microsoft Certified: Security, Compliance, and Identity Fundamentals
(SC-900) certification

Attackers Log In. Stop Them.

Most breaches start with a person, a password or a phishing email. Learn how Microsoft’s identity, security and compliance tools shut those doors, in a single day.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

SC-900

Course

1 day

Course fee

RM1,200

With exam

RM1,425

Next intake

11 Dec 2026

Quick answer

What is SC-900?

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) is Microsoft’s beginner certification for security, compliance and identity. One 45-minute exam covers core concepts plus Microsoft Entra, Microsoft’s security solutions and Microsoft Purview. There are no prerequisites, and fundamentals certifications do not expire.

Exam facts verified against learn.microsoft.com on 22 Oct 2026

FOR

IT staff, compliance officers, business stakeholders and students

ROLES

IT support, compliance analyst, junior identity administrator

SKIP IF

You already run Microsoft security tools. Go straight to SC-200 or SC-300

01

The Credential

What you study and sit to earn it.

Pass exam SC-900 and you hold Microsoft Certified: Security, Compliance, and Identity Fundamentals. It is the common starting point for Microsoft’s security, identity and compliance certifications.

COURSE

1 day, 16 modules

OFFICIAL

Microsoft Official Course SC-900T00

EXAM

SC-900, 45 min

CREDENTIAL

Microsoft Certified Fundamentals

Awarded by

Microsoft

Level

Beginner

Prerequisites

None required

Validity

Does not expire

Skills outline

Updated 21 Oct 2026

Languages

13, including English and Indonesian

02

Decide in 60 Seconds

Four first steps people compare.

If you want to

Choose

Why

Understand security, compliance and identity in Microsoft environments

→

SC-900

One-day foundation across Azure and Microsoft 365

A vendor-neutral security baseline

→

CompTIA Security+

Core security skills that apply to any vendor’s tools

Broad cybersecurity fundamentals with no experience

→

ISC2 CC

Entry-level credential from the body behind CISSP

Work in a SOC that runs Microsoft Sentinel and Defender

→

SC-200

Microsoft’s role-based security operations certification

Is SC-900 your starting point?
0/4

Tick what applies. 3 or 4: SC-900 is a strong first step. Fewer: a vendor-neutral start such as Security+ or ISC2 CC may suit you better.

03

What the Exam Covers

Four skill areas from Microsoft’s SC-900 study guide. Bars use the midpoint of each range.

4 skill areasLargest: Microsoft security solutions, 35 to 40%Skills updated 21 Oct 2026

Capabilities of Microsoft security solutions · 35–40%
Capabilities of Microsoft Entra · 25–30%
Capabilities of Microsoft compliance solutions · 20–25%
Concepts of security, compliance and identity · 10–15%

Source: Microsoft SC-900 study guide, skills measured as of 21 Oct 2026.

04

What the Course Covers

16 modules in four themes, matching the four exam skill areas.

One day of instructor-led training on the Microsoft Official Course. You move from core concepts to the Microsoft tools that put them into practice.

2 modules

Core Concepts

  • Security and compliance concepts
  • Identity concepts

4 modules

Microsoft Entra

  • Function and identity types of Entra ID
  • Authentication capabilities
  • Access management
  • Identity protection and governance

4 modules

Microsoft Security Solutions

  • Core infrastructure security in Azure
  • Security management in Azure
  • Microsoft Sentinel
  • Threat protection with Microsoft Defender XDR

6 modules

Microsoft Compliance Solutions

  • Service Trust Portal and privacy
  • Compliance management in Purview
  • Information protection and data lifecycle
  • Insider risk
  • eDiscovery and audit
  • Resource governance in Azure

Free

practice assessment on Microsoft Learn, so you can check your readiness before exam day.

05

Why Now

What attackers target, what they take, and why train with us.

73%

of initial access came through user actions, valid accounts, social engineering or phishing

Microsoft Digital Defense Report 2026

63%

of intrusions Microsoft observed involved data theft

Microsoft Digital Defense Report 2026

16%

rise in cyber incidents reported to MyCERT in Q1 2026, to 2,188 cases

MyCERT Cyber Incident Summary Report, Q1 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Most of those incidents begin with an identity. Know how to protect it.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

Microsoft Solutions Partner, Training Services

Delivering the Microsoft Official Course SC-900T00

One day

The full SC-900 syllabus in a single day of training

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

One-day courseRM1,200

Exam voucher add-on (SC-900)RM225

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM1,425

RM1,200 + RM225

Dates

Where

Fee

Fri 11 Dec 2026

Kuala Lumpur or online

RM1,200 / RM1,425 with exam

Tue 23 Feb 2027

Kuala Lumpur or online

RM1,200 / RM1,425 with exam

Mon 12 Apr 2027

Kuala Lumpur or online

RM1,200 / RM1,425 with exam

Fri 11 Jun 2027

Kuala Lumpur or online

RM1,200 / RM1,425 with exam

Fri 6 Aug 2027

Kuala Lumpur or online

RM1,200 / RM1,425 with exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Microsoft Certified: Security, Compliance, and Identity Fundamentals

Exam code

SC-900

Duration

45 minutes

Passing score

700 or greater

Delivery

Proctored online or at a test centre

Languages

13, including English, Chinese, Japanese, Korean and Indonesian

Retakes

From 24 hours after your first attempt

Exam voucher

RM225 add-on through Trainocate

NO EXPIRY

Yours for good

Microsoft fundamentals certifications do not expire, so there is nothing to renew.

NEXT MOVE

Go role-based

Associate certifications such as SC-200 renew free each year through an online assessment on Microsoft Learn.

FAQ

Questions People Ask

What is the SC-900 certification?

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) is Microsoft’s beginner certification. It proves you understand security, compliance and identity concepts and how Microsoft Entra, Microsoft’s security solutions and Microsoft Purview put them into practice.

The exam runs for 45 minutes and you need a score of 700 or greater to pass. There are no prerequisites.

At Trainocate Malaysia the one-day course is RM1,200 per person, or RM1,425 per person with the exam voucher. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

No. Microsoft fundamentals certifications do not expire, so you never need to renew SC-900.

Take SC-900 if your organisation runs Microsoft 365 or Azure and you want the Microsoft view of security, compliance and identity. Take Security+ for a broader, vendor-neutral baseline that applies to any employer’s tools.

SC-900 is the beginner foundation. SC-200 is a role-based associate certification for security operations analysts who investigate and respond to threats with Microsoft Sentinel and Defender XDR.

Most people move to a role-based associate certification: SC-200 for security operations, SC-300 for identity and access, or SC-401 for information security and compliance.

Secure the Login. Start Here.

Pick an intake. An advisor confirms your seat, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: Fri 11 Dec 2026
  • RM1,200, or RM1,425 with exam

Sources

  1. Microsoft Learn: Security, Compliance, and Identity Fundamentals
  2. Microsoft Learn: SC-900 study guide
  3. Microsoft Learn: Renew your Microsoft certification
  4. Microsoft Learn: Security Operations Analyst Associate (SC-200)
  5. Microsoft Learn: Identity and Access Administrator Associate (SC-300)
  6. Microsoft Learn: Information Security Administrator Associate (SC-401)
  7. Microsoft Source Asia: Digital Defense Report 2026
  8. Trainocate: SC-900T00 course outline
  9. CyberSecurity Malaysia: Q1 2026 Cyber Incident Summary Report
  10. NACSA: Cyber Security Act 2024 (Act 854)
  11. MAICSA: Act 854 regulations summary