Free Practice · No Signup Required

30 Free Azure SC-900 Practice Questions

Real practice questions for the Azure Security, Compliance, & Identity (SC-900) exam, with answers and detailed explanations. Updated 2026.

Start Timed Exam Mode Unlock all 211+ Questions

Free questions

Passing score

700 out of 1000

Exam time

60 minutes

Question pool

211+ Questions

Below are 30 real practice questions for the Azure Security, Compliance, & Identity (SC-900) exam. Each question shows the correct answer and a detailed explanation when you reveal it. Use these to benchmark your readiness — if you score below 70% on these 30 questions, plan for at least 4 more weeks of study before booking.

SC-900 Practice Questions

FreePracticeQuiz.questionLabelIdentity & Access
Conditional access policies always enforce the user of multi-factor authentication (MFA).
A
Yes.
B
No.
FreePracticeQuiz.questionLabelIdentity & Access
Conditional access policies can be used to block access to an application based on the location of the user.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelIdentity & Access
Conditional access policies only affect users who have Microsoft Entra ID-joined devices.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelCompliance
[...] is used to identify, hold, and export electronic information that might be used in an investigation.
A
Customer Lockbox.
B
Data loss prevention (DLP).
C
eDiscovery.
D
Resource lock.
FreePracticeQuiz.questionLabelSecurity Solutions
Microsoft Defender for Endpoint can protect Android devices.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Solutions
Microsoft Defender for Endpoint can protect Azure virtual machines that run Windows 10.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Solutions
Microsoft Defender for Endpoint can protect Microsoft SharePoint Online sites and content from viruses.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Solutions
What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?
A
Automated remediation.
B
Automated investigation.
C
Advanced hunting.
D
Network protection.
FreePracticeQuiz.questionLabelCompliance
Which score measures an organization’s progress in completing actions that help reduce risks associated to data protection and regulatory standards?
A
Microsoft Secure Score.
B
Productivity Score.
C
Secure score in Microsoft Defender for Cloud.
D
Compliance score.
FreePracticeQuiz.questionLabelGovernance
You can add a resource lock to an Azure subscription.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelGovernance
You can add only one resource lock to an Azure resource.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelGovernance
You can delete a resource group containing resources that have resources locks.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Solutions
Azure Defender can detect vulnerabilities and threats for Azure Storage.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Solutions
Cloud Security Posture Management (CSPM) is available for all Azure subscriptions.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Solutions
Microsoft Defender for Cloud can evaluate the security of workloads deployed to Azure or on-premises.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Concepts
In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?
A
The management of mobile devices.
B
The permissions for the user data stored in Azure.
C
The creation and management of user accounts.
D
The management of the physical hardware.
FreePracticeQuiz.questionLabelIdentity & Access
Which Microsoft 365 feature can you use to restrict communication and the sharing of information between members of two departments at your organization?
A
Sensitivity label policies.
B
Customer Lockbox.
C
Information Barriers.
D
Privileged Access Management (PAM).
FreePracticeQuiz.questionLabelSecurity Solutions
You can use [...] in the Microsoft 365 security center to identify devices that are affected by an alert.
A
classifications.
B
incidents.
C
policies.
D
secure score.
FreePracticeQuiz.questionLabelIdentity & Access
When users sign in to the Azure portal, they are first [...].
A
assigned permissions.
B
authenticated.
C
authorized.
D
resolved.
FreePracticeQuiz.questionLabelSecurity Concepts
You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure. Which security methodology does this represent?
A
Threat modeling.
B
Identity as the security perimeter.
C
Defense in depth.
D
The shared responsibility model.
FreePracticeQuiz.questionLabelCompliance
Compliance Manager assesses compliance data [...] for an organization.
A
continually.
B
monthly.
C
on-demand.
D
quarterly.
FreePracticeQuiz.questionLabelSecurity Solutions
What should you use in the Microsoft 365 security center to view security trends and track the protection status of identities?
A
Attack simulator.
B
Reports.
C
Hunting.
D
Incidents.
FreePracticeQuiz.questionLabelSecurity Concepts
Digitally signing a document requires a private key.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Concepts
Verifying the authenticity of a digitally signed document requires the public key of the signer.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Concepts
Verifying the authenticity of a digitally signed document requires the private key of the signer.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelGovernance
In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase?
A
Plan.
B
Manage.
C
Adopt.
D
Govern.
E
Define Strategy.
FreePracticeQuiz.questionLabelIdentity & Access
What can you use to provide a user with a two-hour window to complete an administrative task in Azure?
A
Microsoft Entra ID Privileged Identity Management (PIM).
B
Azure Multi-Factor Authentication (MFA).
C
Microsoft Entra ID Identity Protection.
D
conditional access policies.
FreePracticeQuiz.questionLabelSecurity Solutions
Applying system updates increases an organization's secure score in Microsoft Defender for Cloud.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Solutions
The secure score in Microsoft Defender for Cloud can evaluate resources across multiple Azure subscriptions.
A
Yes.
B
No.
FreePracticeQuiz.questionLabelSecurity Solutions
Enabling multi-factor authentication (MFA) increases an organization's secure score in Microsoft Defender for Cloud.
A
Yes.
B
No.

Progress: 0 of 30 questions completed

Ready for the full SC-900 exam?

Get all 211+ Questions, timed simulation, and weak-area analytics. Plans from $2.99 — credits never expire.

See pricing

Frequently Asked Questions

Are these real SC-900 practice questions?+

Yes. These 30 questions are taken directly from our 211+ Questions pool, written and reviewed by certified practitioners. They mirror the style, difficulty, and scope of the official Azure SC-900 exam.

Is the SC-900 exam hard?+

The Azure Security, Compliance, & Identity (SC-900) is considered a pass-mark exam (passing score: 700 out of 1000). Most candidates need 4–8 weeks of focused preparation. Use these free questions to gauge where you stand before committing to a full study plan.

How many questions are on the real SC-900 exam?+

The official SC-900 exam has 40-60 questions.

Do I need to sign up to use these questions?+

No. These 30 questions are free and require no signup. If you want timed simulation, performance analytics, and access to all 211+ Questions, our paid plans start at $2.99 per exam with credits that never expire.

Keep studying

Full exam

Azure Security, Compliance, & Identity (SC-900) details

Free practice

Microsoft AZ-900

Free practice

Microsoft AZ-500

Free practice

Microsoft AZ-104

Pass SC-900 on your first try

Join candidates using DummyExams to practice with realistic timed exams, detailed explanations, and weak-area analytics.

Start full SC-900 practice exam

30 Free Azure SC-900 Practice Questions

SC-900 Practice Questions

Conditional access policies always enforce the user of multi-factor authentication (MFA).

Conditional access policies can be used to block access to an application based on the location of the user.

Conditional access policies only affect users who have Microsoft Entra ID-joined devices.

[...] is used to identify, hold, and export electronic information that might be used in an investigation.

Microsoft Defender for Endpoint can protect Android devices.

Microsoft Defender for Endpoint can protect Azure virtual machines that run Windows 10.

Microsoft Defender for Endpoint can protect Microsoft SharePoint Online sites and content from viruses.

What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface?

Which score measures an organization’s progress in completing actions that help reduce risks associated to data protection and regulatory standards?

You can add a resource lock to an Azure subscription.

You can add only one resource lock to an Azure resource.

You can delete a resource group containing resources that have resources locks.

Azure Defender can detect vulnerabilities and threats for Azure Storage.

Cloud Security Posture Management (CSPM) is available for all Azure subscriptions.

Microsoft Defender for Cloud can evaluate the security of workloads deployed to Azure or on-premises.

In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?

Which Microsoft 365 feature can you use to restrict communication and the sharing of information between members of two departments at your organization?

You can use [...] in the Microsoft 365 security center to identify devices that are affected by an alert.

When users sign in to the Azure portal, they are first [...].

You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure. Which security methodology does this represent?

Compliance Manager assesses compliance data [...] for an organization.

What should you use in the Microsoft 365 security center to view security trends and track the protection status of identities?

Digitally signing a document requires a private key.

Verifying the authenticity of a digitally signed document requires the public key of the signer.

Verifying the authenticity of a digitally signed document requires the private key of the signer.

In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase?

What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

Applying system updates increases an organization's secure score in Microsoft Defender for Cloud.

The secure score in Microsoft Defender for Cloud can evaluate resources across multiple Azure subscriptions.

Enabling multi-factor authentication (MFA) increases an organization's secure score in Microsoft Defender for Cloud.

Ready for the full SC-900 exam?

Frequently Asked Questions

Keep studying

Pass SC-900 on your first try