MCS study materials
MCS study resources

MCS case studies

MCS · Put your knowledge to work in context.

SC-900, officially Microsoft Certified: Security, Compliance, and Identity Fundamentals, is an entry-level credential that confirms you can describe how Microsoft's cloud security stack fits together rather than configure it. It suits people moving into security, compliance, or identity work; sales and pre-sales staff who need credible vocabulary; IT generalists whose duties now touch Microsoft Entra, Defender, or Purview; and students building a first certification path toward the associate-level security exams. The MCS case studies are 5 cases and about 4,055 words.

1

Contoso Fabrication: Drawing the Shared Responsibility Line

Contoso Fabrication employs 900 people. Last year it moved email and project files to Microsoft 365 E3 but kept its ERP on a Windows Server 2019 host in a colocation facility and runs a customer quote portal on Azure infrastructure VMs that the IT team patches manually.

794 words, about 4 min
2

Fabrikam Health: Contractor Access and the Legacy Authentication Trap

Fabrikam Health has 3,200 employees and 800 contractors. Its on-premises Active Directory Domain Services is synchronized to Microsoft Entra ID with Entra Connect.

828 words, about 4 min
3

Northwind Logistics: XDR, Sentinel, and a Budget That Fits One

Northwind Logistics runs a six-analyst SOC. The estate includes 4,500 Windows endpoints, 700 Linux servers, Microsoft 365 E5, eight AWS accounts, and SAP on-premises.

811 words, about 4 min
4

Woodgrove Bank: Labels, Retention, and a Regulatory Inquiry

Woodgrove Bank has 12,000 employees and is subject to GDPR, PCI DSS, and a national banking regulator. Cardholder data appears in Exchange Online mailboxes and SharePoint sites despite a policy saying it should not.

789 words, about 4 min
5

Tailspin Toys: Posture, Runtime, and Six Thousand Recommendations

Tailspin Toys runs 22 Azure subscriptions, eight AWS accounts, and a GCP pilot. The estate has 1,100 VMs, containers on AKS, and infrastructure as code deployed from GitHub.

833 words, about 4 min