JITA Learning · Microsoft · Field Guide
SC-900 · Microsoft Security, Compliance, and Identity Fundamentals
Build working judgment for security, compliance, and identity fundamentals.
What you should expect
Build working judgment for security, compliance, and identity fundamentals.
This Field Guide develops a working mental model of security, compliance, and identity fundamentals. You will connect understand shared responsibility, defense in depth, Zero Trust, encryption, hashing, governance, and risk concepts, distinguish authentication, authorization, identity providers, directories, federation, and hybrid identity, recognize Microsoft Entra identity and access capabilities, and understand Defender and security-operations concepts across Microsoft cloud services. You are not just memorizing feature names; you are learning what owns the requirement, what can fail, and how to verify the outcome.
What you will learn
- understand shared responsibility, defense in depth, Zero Trust, encryption, hashing, governance, and risk concepts
- distinguish authentication, authorization, identity providers, directories, federation, and hybrid identity
- recognize Microsoft Entra identity and access capabilities
- understand Defender and security-operations concepts across Microsoft cloud services
- recognize why one technically plausible alternative loses under the stated requirement
- apply Changed Fact reasoning and verify the design or implementation through operational evidence
Decision skills you will practice
- identify the governing requirement
- compare the nearest plausible alternative
- apply Changed Fact reasoning
- trace prerequisites, dependencies, and failure paths
- verify configured state, effective state, runtime outcome, and negative-path evidence
Who this is for
learners building a foundational mental model of Microsoft identity, security, compliance, Zero Trust, Defender, and Purview concepts
Use this when you need to learn the architecture, mechanics, dependencies, tradeoffs, failure paths, and verification logic behind the certification.
Decisions you will learn to distinguish
- authentication vs authorization
- Defender security control vs Purview compliance/information-protection control
- Zero Trust principle vs specific implementation technology
Why JITA is different
Microsoft explains the platform. JITA teaches the decision.
Microsoft Learn explains the services, features, and documented behavior that support security, compliance, and identity fundamentals. JITA connects those capabilities into decisions: what owns the requirement, what the nearest alternative is, what changes when one fact changes, and what evidence proves the implementation worked.
How to choose:
Use the Field Guide to build understanding. Use the Exam Preparation Guide to test whether that understanding survives exam-style decisions.