Skip to main content
Cybersecurity

Microsoft SC-900

Microsoft security/compliance/identity primer. Feeds the SC-200/300/400 lane, nothing more.

DifficultyBeginner
Study2–4 weeks
Exam (indicative)£82
Validno expiry

Vendor record

This entry has not yet been read against the vendor's own documentation. Exam names, codes and prices shown on this page are indicative; check the vendor before booking anything.

Microsoft exam pricing
Compare
Reality check

SC-900 is a vocabulary cert for the Microsoft security stack. It earns its place stacked under SC-200 or SC-300; on its own it doesn't shift a CV out of the helpdesk pile.

This cert in isolation tells you very little. Here is where it actually sits. The pathways that use it, and the roles it realistically supports.

  • Vocabulary for the SC-200/300/400 series
  • Career switchers signalling Microsoft direction
Practitioner take

SC-900 is the Microsoft security fundamentals cert and it's the right cert for almost nobody. AZ-900 covers more ground at the same level, the SC-900 syllabus repeats most of what AZ-900 teaches plus a thin security and compliance overview, and listing both looks like padding. Take SC-900 only if you're moving into a sales, account management, or compliance-adjacent role at a Microsoft partner and you need a defensible security-fundamentals line. Skip it as a technical security cert. AZ-500, SC-200, or SC-300 do real work for the same study time.

Authored opinion. Updated against current hiring conditions, not vendor marketing.

Recommended prior knowledge

  • None

Common misconceptions

  • Microsoft SC-900 alone clears HR filters; it doesn't replace shipped, documented work.

What this cert does NOT guarantee

  • Any SOC, IAM or compliance role on its own

Practitioner judgement. External evidence review pending.

Last reviewed: not yet reviewed · UK market

The next step

A cert is a signal. A Career Verdict tells you whether the signal is worth sending.

A Career Verdict tells you whether this cert earns its place on your specific route, what it won't fix, and what to sit before or after it.

A route shows what is possible. A Career Verdict makes the call.

POST ATLASVerdict no. PA-2026-0512
Career analysis report

Career Verdict

Helpdesk → Security Architect

“Realistic, but not by adding another certification.”
  1. 01
    The callA clear judgement on whether your route is realistic, and under what conditions.
  2. 02
    Where the route breaksThe most likely point to stall, and why it happens in practice.
  3. 03
    What to do nextSpecific priorities for the next 6–24 months, and what to drop.
Generated within POST’s practitioner-authored assessment frameworkPOST ATLAS

Career Verdict

£39One-off payment. No subscription.
  • The callA single written judgement on whether the route is realistic for you.
  • Plateaus and failure modesThe flat years and the specific ways this route tends to stall.
  • Where you standThe strongest and weakest parts of your current position, named.
  • Salary realityWhat this route actually pays, set against what you've been told it pays.
See the Career Verdict

Usually within minutes of payment. Kept 24 months, then deleted. Deletion on request at any time.

Built on POST's practitioner-authored assessment framework, informed by two decades across helpdesk, infrastructure and security. The verdict applies that framework to your inputs.