Microsoft SC-900 case studies
Microsoft SC-900 · Put your knowledge to work in context.
SC-900 is Microsoft's entry-level certification for security, compliance, and identity fundamentals. Microsoft describes it as demonstrating foundational knowledge of security, compliance, and identity concepts and related cloud-based Microsoft solutions, and targets anyone looking to familiarize themselves with those fundamentals across cloud-based and related Microsoft services. The audience is deliberately broad: business stakeholders, new or existing IT professionals, and students. Microsoft recommends familiarity with Azure and Microsoft 365 and an interest in how security, compliance, and identity solutions span both to deliver a holistic, end-to-end approach. Topics on this exam: Describe the concepts of security, compliance, and identity, Describe the capabilities of Microsoft Entra, Describe the capabilities of Microsoft security solutions, and Describe the capabilities of Microsoft compliance solutions. The Microsoft SC-900 case studies are 5 cases and about 2,435 words.
1Conditional Access Rollout Blocked by Legacy Mail Clients
Contoso has 4,200 users, all licensed for Microsoft Entra ID P1. The identity team builds a Conditional Access policy named Block-Legacy that targets All users and All cloud apps, with a client apps condition set to block exchange active sync and other legacy clients.
485 words, about 2 min2B2B Collaboration Guest Cannot Reach a Shared Team
Fabrikam collaborates with a partner, Northwind. Northwind users are invited as guests into Fabrikam's Microsoft Entra tenant.
494 words, about 2 min3Phishing Simulation Reveals Gaps in Defender Coverage
A 900-user company runs Microsoft Defender for Office 365 Plan 1 and Microsoft Defender for Endpoint Plan 1. The security team runs an internal phishing simulation.
487 words, about 2 min4Retention Labels Versus DLP in a Shared Document Library
A regulated firm stores client contracts in a SharePoint document library. A retention label named Contract-7yr retains content for seven years and then deletes it.
486 words, about 2 min5Zero Trust Gaps in a Hybrid Identity Environment
A manufacturer runs Active Directory Domain Services on-premises and syncs to Microsoft Entra ID using Microsoft Entra Connect. Password hash synchronization is enabled.
483 words, about 2 min