Certifications
Is SC-900 worth taking?
It depends entirely on who you are. For one group it is genuinely valuable, for another it is an afternoon that proves nothing.
What it actually is
SC-900 Security, Compliance and Identity Fundamentals is a vocabulary exam. It covers security and compliance concepts, what Entra does, what Defender is, what Purview is for, at the level of being able to hold a conversation rather than configure anything.
It is short, it is inexpensive, and it does not expire in the way role-based certifications do.
| Worth taking? | |
|---|---|
| Career changer entering IT | |
| Salesperson selling Microsoft security | |
| Project manager on a security programme | |
| Compliance or legal, working with IT | |
| Working systems administrator | |
| Anyone holding an associate certification |
The dividing line is whether you need the vocabulary or already have it.
The honest case against
If you administer Microsoft 365 today you will pass SC-900 without studying, and it adds nothing to a profile that already shows an associate credential. Recruiters do not weigh it, and it can read as padding next to SC-200 or SC-300.
Spend the exam fee and the fortnight on SC-300 instead.
The verdict
Take it if you need the vocabulary, skip it if you have it
For non-technical people working alongside security it is a genuinely efficient way to become useful in the conversation.
Skip it if you already configure any of these products. Go straight to the role exam.
Disclosure. Some links on this site are affiliate links. Scoring weights are published before any programme is joined, and commission is never a ranking input. Full policy, and the method behind this guide.