Security, Compliance & Identity Certification Path
The Microsoft Security, Compliance & Identity (SC) track covers identity administration, security operations, information protection, and cybersecurity architecture. Start with SC-900 if you are new to security concepts, or pick a specialty exam if you already work in a security role.
The full Security, Compliance & Identity roadmap
Microsoft Entra, Defender, Purview, and Sentinel — the SC track covers security fundamentals, identity administration, and security operations.
Certification Path Finder
Answer two quick questions to find the right Microsoft certification for you — no signup required.
Frequently Asked Questions
What is the Microsoft security certification path?
The path starts with SC-900 (Security, Compliance & Identity Fundamentals), branches into Associate exams — SC-300 for identity administration, SC-200 for security operations, SC-401 for information protection, or SC-500 for end-to-end security — and tops out at the Expert-level SC-100 Cybersecurity Architect exam.
What is the difference between SC-900 and SC-300?
SC-900 is an entry-level Fundamentals exam covering security, compliance, and identity concepts at a high level with no prerequisites. SC-300 is an Associate-level, hands-on exam focused specifically on Microsoft Entra identity and access administration.
Which Microsoft security certification should I get first?
If you are new to security concepts, start with SC-900. If you already work in identity, security operations, or compliance, go directly to the matching Associate exam (SC-300, SC-200, or SC-401).
Not sure? Explore all certification paths
See the full Fundamentals-to-Expert roadmap for every Microsoft track we cover.
View all certification paths