Cloud with If you're moving into Microsoft identity and security, two exams come up again and again: SC-900 and SC-300. They sound related, and they are, but they're aimed at very different stages of your career.
The short answer
If you're new to Microsoft security and identity, start with SC-900. If you already manage users, groups and access in Microsoft Entra ID day to day, you can go straight to SC-300.
Side by side
| SC-900 | SC-300 | |
|---|---|---|
| Full name | Microsoft Security, Compliance, and Identity Fundamentals | Microsoft Identity and Access Administrator |
| Level | Fundamentals | Associate |
| Focus | Concepts across security, compliance and identity in Microsoft's cloud | Hands-on implementation and management of identity with Microsoft Entra ID |
| Best for | Beginners, career switchers, non-technical roles working with security teams | Administrators and engineers who configure identity and access |
| Renewal | Does not expire | Renew yearly with a free online assessment |
What SC-300 actually tests
SC-300 is a practical exam. Expect questions on:
- Setting up and managing users, groups and external (guest) identities
- Authentication methods, MFA and passwordless sign-in
- Conditional Access policies
- Privileged Identity Management (PIM) and access reviews
- App registrations, enterprise apps and single sign-on
- Identity governance, including entitlement management
SC-900 is not a formal prerequisite for SC-300. It's useful if the concepts are new to you, but experienced admins can skip it.
A sensible path
- New to the area? Take SC-900 first to learn the vocabulary, then move to SC-300.
- Already working in Entra ID? Go straight to SC-300 and spend your time in the labs.
- Either way: practise in a real tenant. SC-300 rewards people who have clicked through the portal, not just read about it.
Coming soon: one course for both
I'm building an SC-300 course that includes SC-900 as a free bonus, follows the latest Microsoft curriculum, and walks through all 28 official SC-300 labs. Get notified when it launches.