SC-900: Security, Compliance, and Identity Fundamentals
The SC-900 exam voucher costs Rs 13,000/= at induwara.lk, payable in Sri Lankan rupees by card or bank transfer. It is an official single-use voucher for the Microsoft exam, not a practice test or a training course. The voucher is valid for 12 months from purchase. After payment our team confirms your order and sends the voucher code by email.
What this voucher is
SC-900: Security, Compliance, and Identity Fundamentals is the official Microsoft exam voucher, sold in Sri Lankan rupees. It is the exam fee itself — a single-use code you redeem when you book your exam with the vendor's testing provider. It is not a training course, a practice test bundle or a study guide.
Each voucher is valid for 12 months from the date of purchase, so you can book the exam when you are ready rather than the day you buy.
Who sits this exam
SC-900: Security, Compliance, and Identity Fundamentals is aimed at SOC analysts, network engineers and anyone moving into a security role. It is an entry-level exam, so there is no formal prerequisite — it is a reasonable first certification. Sri Lankan banks, ISPs and BPO firms hire against named security certifications, and the exam fee is usually the part that stalls people.
Why buy it here
Vendor exam fees are quoted in US dollars, which means the rupee price you actually pay depends on your card's rate on the day and whatever your bank adds on top. Here the price is fixed in rupees — Rs 13,000/= — so what you see is what leaves your account.
You can pay by card through PayHere, or by direct bank transfer if you would rather not put an exam fee on a card. Both are confirmed by us before anything is sent.
How delivery works
Delivery is handled by a person, not a script. Once your payment is confirmed, our team contacts you and sends the voucher code to the email address on your order. That usually happens the same day, and you will hear from us either way — if there is any delay sourcing a particular voucher, we tell you rather than leaving the order sitting.
If you need an invoice for an employer or a training budget, say so when you order and we will issue one against the order number.
Exam at a glance
Exam length
45 minutes
Questions
Microsoft does not publish a per-exam count. It states that most Microsoft Certification exams typically contain between 40 and 60 questions, and that the number can vary depending on the exam.
Passing score
700 or greater on a scale of 1 to 1,000. Microsoft notes that as a scaled score it may not equal 70% of the points.
Prerequisites
None. Microsoft aims it at business stakeholders, new or existing IT professionals and students, and expects only that you are familiar with Microsoft Azure and Microsoft 365.
Languages
English, Japanese, Chinese (Simplified), Korean, French, Spanish, Portuguese (Brazil), Russian, Arabic (Saudi Arabia), Indonesian (Indonesia), German, Chinese (Traditional), Italian
Sat through
Pearson VUE — proctored, at a test centre or online. Students and educators can also schedule through Certiport.
Certification valid
Does not expire — Microsoft states that Fundamentals certifications do not expire, unlike associate, expert and specialty certifications, which expire annually
Price here
Rs 13,000/=
Exam details are taken from the vendor’s own documentation. Anything we could not confirm there is left out rather than estimated.
What you get, and what happens next
What you get
One official single-use exam voucher for SC-900, SC-900: Security, Compliance, and Identity Fundamentals, covering the exam fee in full. It is a code, not a study course and not a practice test. There is nothing physical to ship and no delivery charge.
When it arrives
Emailed to the address on your order once we have confirmed the payment, by a person rather than automatically. In practice that is usually the same day and almost always within one working day. If sourcing a particular voucher is going to take longer, we tell you rather than leaving the order sitting.
How long it stays valid
12 months from purchase. Book and sit the exam before it expires, a code that has simply run out of time cannot be replaced, so do not buy months ahead of when you plan to use it.
How you redeem it
Book the exam with Pearson VUE as normal, then enter this code at the payment step instead of paying the fee. You choose the date, and whether you sit it at a test centre or from home with OnVUE proctoring.
If the code does not work
If the vendor rejects it when you try to redeem it, tell us straight away and we replace it or refund you in full. Contact us before the voucher’s own expiry date.
If you do not pass
A voucher covers one attempt. A retake needs a new voucher, and the vendor, not us, sets how long you must wait before sitting the exam again. Check the vendor’s retake policy before you book.
Changing your mind
Full refund for any reason as long as we have not yet sent the code, including if you realise you have ordered the wrong exam, which is easy to do when codes look alike. Once the code has been sent it cannot be refunded, because the code is the product and it is single-use. Refunds & delivery in full.
What the exam covers
Describe the concepts of security, compliance, and identity — 10–15%
Describe the capabilities of Microsoft Entra — 25–30%
Describe the capabilities of Microsoft security solutions — 35–40%
Describe the capabilities of Microsoft compliance solutions — 20–25%
Core concepts: shared responsibility model, defence in depth, Zero Trust, encryption and hashing, and governance, risk and compliance
Identity concepts: identity as the primary security perimeter, authentication, authorisation, identity providers, directory services and federation
Microsoft Entra ID: identity types including agent ID, hybrid identity, authentication methods, MFA, Conditional Access, role-based access control, ID Governance, access reviews, Privileged Identity Management and ID Protection
Azure infrastructure security: DDoS Protection, Azure Firewall, Web Application Firewall, network segmentation, network security groups, Azure Bastion and Key Vault
Microsoft Defender for Cloud, cloud security posture management, and Microsoft Sentinel as SIEM and SOAR
Microsoft Defender XDR including Defender for Office 365, Endpoint, Cloud Apps, Identity, Vulnerability Management and Threat Intelligence
Microsoft Purview: Compliance Manager, data classification, sensitivity labels, DLP, records management, retention, insider risk, eDiscovery and audit
Microsoft Service Trust Portal and Microsoft's privacy principles
Where it leads
SC-900 will not by itself get you a security job, and it is honest to say so. What it does is give a verifiable starting credential that costs one 45-minute sitting and, because Microsoft states that Fundamentals certifications do not expire, never has to be renewed. That makes it useful on a first CV, for an internal move towards a security team, or as proof of a baseline before an employer funds a deeper certification. It is the natural feeder into SC-300 for identity work or SC-401 for information security.
Sitting this exam in Sri Lanka
SC-900 is a realistic first Microsoft certification for an undergraduate or a support engineer switching towards security, for three practical reasons: no prerequisites, 45 minutes of exam time, and no expiry — Microsoft states that Fundamentals certifications do not expire, so there is no annual renewal to keep track of. Students and educators can book it through Certiport as well as Pearson VUE, which matters if your university or training centre is a Certiport testing site. Microsoft prices exams by the country or region in which the exam is proctored and publishes no list price on the exam page, so a local voucher at {{PRICE}} is the only way to know the rupee cost before you commit. Register with a personal Microsoft account, not a university or work account — Microsoft warns that exam records tied to an organisational account are lost and unrecoverable if you leave that organisation.
Where these details come from
Every fact on this page was read off the vendor’s own documentation. Vendors change exam content, pricing and retirement dates without notice, so check these before you book.
45 minutes of exam time. Microsoft's duration table allocates 65 minutes of seat time for a Fundamentals exam, which covers reviewing the instructions, accepting the candidate agreement and leaving optional comments at the end. Microsoft does not publish a question count for individual exams, stating only that most of its certification exams typically contain between 40 and 60 questions.
What is the passing score for SC-900?
700 or greater on a scale of 1 to 1,000. Microsoft notes that because this is a scaled score it may not equal 70% of the points available — for easier sets of questions more points are required to pass and for harder sets fewer.
Does the SC-900 certification expire?
No. Microsoft states plainly on its renewal page that Fundamentals certifications do not expire. That makes SC-900 different from associate-level exams such as SC-300, which expire after one year and need a free renewal assessment to stay active. Once you pass SC-900 there is nothing further to do.
Can I use Microsoft Learn during the exam like on role-based exams?
No. Microsoft allows access to learn.microsoft.com during associate and expert role-based exams, but states that access to Learn is not available on Fundamentals exams or GitHub exams. You sit SC-900 without lookups.
Which section is the biggest?
Microsoft security solutions, at 35–40% of the exam — that is Azure infrastructure security, Defender for Cloud, Microsoft Sentinel and the Defender XDR family. Microsoft Entra follows at 25–30%, compliance solutions at 20–25% and core security, compliance and identity concepts at 10–15%. The outline was last updated on 28 July 2026.
Do I need any IT background to sit SC-900?
No prerequisites at all. Microsoft aims it at business stakeholders, new or existing IT professionals and students, and asks only that you are familiar with Azure and Microsoft 365. Every objective is phrased as 'describe' or 'define' rather than 'configure' or 'implement', so you are tested on understanding what the products do, not on operating them.
What should I take after SC-900?
It depends on the direction. If identity administration interests you, SC-300 (Identity and Access Administrator) is the next step up and covers Conditional Access, Privileged Identity Management and identity governance in depth. If data protection and Microsoft Purview is the draw, SC-401 (Information Security Administrator) is the current exam — note that SC-400 was retired on 30 May 2025 and is no longer bookable.
Where to go next
The step before and the step after this one, plus a comparable exam from another vendor.
