Practice exam only
€18.99
30 days · Labs not included.
View exam access →SC-900 · Hands-on practice
SC-900 Hands-on Labs — practise in a simulated Microsoft Entra, Defender and Purview portals
Learn it. Practise it. Make it stick.
36 practical tasks + 3 troubleshooting challenges. Familiar administration workflows, gradual hints and explanations. Independent simulation — no real tenant, device or cloud resources.
First five tasks are free, repeatable and have no expiry · No credit card required.
Access options
One-time payments, no automatic renewal. The first five tasks stay free either way.
SC-900 Hands-on Labs
€14.99
All labs for this course. 30 days from payment confirmation.
One-time payment · No automatic renewal.
Purchases are temporarily unavailable. Enjoy your 5 open tasks.
SC-900 Practice Exam + Hands-on Labs
€29.99
Save €3.99. Exam and all labs each get 60 days.
One-time payment · No automatic renewal.
Purchases are temporarily unavailable. Enjoy your 5 open tasks.
Certificate of Completion
Finish the course. Prove it.
Complete all 36 labs and you can download a certificate of completion with your name, the skills you practised and a unique ID. Challenges are optional. Anyone can check it on a public verification page — and add it to LinkedIn in one click.
- Not self-declared. Before issuing, our server re-runs the grader on every lab you saved, so a checkbox in your browser is not enough.
- Verifiable. Every certificate has its own page at examitlab.com/verify/<ID>.
- Honest. It certifies that you completed this course. It is independent training, not an official certification.
ExamIT Lab
Certificate of Completion
Security, Compliance and Identity Fundamentals
Hands-on skills course · SC-900 track · 36 graded labs
Alex Morgan
has completed every hands-on lab of the course. Each task was graded on the end state left in simulated administration consoles and on the security decisions made — not on the clicks made.
Zero Trust & defense in depthIdentity & accessAuthentication & MFAConditional accessNetwork & workload protectionThreat detection & responseData protection & complianceGovernance & privacy
Completed
4 October 2026
4 October 2026
36/36labs
Certificate ID
SCI-7K4Q-2M9D-X8
SCI-7K4Q-2M9D-X8
Verify at examitlab.com/verify/SCI-7K4Q-2M9D-X8. This is a certificate of course completion issued by ExamIT Lab. It is independent training and not an official certification of any vendor.
Sample certificate — name and ID are fictional.
Your learning path
Work through the tasks in order — each one builds on the last.
LAB 01 · FREE
Create a user and require MFA registration
Entra users · 8–10 min
Open lab →LAB 02 · FREE
Apply Zero Trust principles to six requests
Zero Trust · 8–10 min
Open lab →LAB 03 · FREE
Layer your defenses: defense in depth
Defense in depth · 8–10 min
Open lab →LAB 04 · FREE
Decide who secures what: shared responsibility
Shared responsibility · 8–10 min
Open lab →LAB 05 · FREE
Write a Conditional Access policy
Entra Conditional Access · 10–12 min
Open lab →LAB 06 · LOCKED
Encryption, hashing and keys
Encryption and hashing · 8–10 min
Included with full SC-900 lab access
LAB 07 · LOCKED
Governance, risk and compliance in practice
Governance, risk, compliance · 8–10 min
Included with full SC-900 lab access
LAB 08 · LOCKED
Identity concepts: authentication, authorization, identity provider, directory, federation
Identity concepts · 8–10 min
Included with full SC-900 lab access
LAB 09 · LOCKED
Pick the identity type and the hybrid sync method
Entra identity types · 8–10 min
Included with full SC-900 lab access
LAB 10 · LOCKED
Choose authentication methods and password protection
Entra authentication methods · 10–12 min
Included with full SC-900 lab access
LAB 11 · LOCKED
Invite an external guest and control B2B access
Entra External Identities · 12–15 min
Included with full SC-900 lab access
LAB 12 · LOCKED
Self-service password reset: scope, methods and registration
Entra Password reset · 12–15 min
Included with full SC-900 lab access
LAB 13 · LOCKED
Least privilege: Entra roles and RBAC
Entra roles and administrators · 8–10 min
Included with full SC-900 lab access
LAB 14 · LOCKED
Review access: Entra ID Governance and access reviews
Entra access reviews · 10–12 min
Included with full SC-900 lab access
LAB 15 · LOCKED
Entitlement management: an access package with approval and expiry
Entra ID Governance · 15 min
Included with full SC-900 lab access
LAB 16 · LOCKED
Privileged Identity Management: eligible, time-bound access
Entra Privileged Identity Management · 10–12 min
Included with full SC-900 lab access
LAB 17 · LOCKED
Triage a risky sign-in with ID Protection
Entra ID Protection · 10–12 min
Included with full SC-900 lab access
LAB 18 · LOCKED
Identity Protection: configure risk-based Conditional Access policies
Entra ID Protection · 15 min
Included with full SC-900 lab access
LAB 19 · LOCKED
Workload identities: managed identity or service principal?
Entra Workload identities · 12–15 min
Included with full SC-900 lab access
LAB 20 · LOCKED
Choose the network security service
Network security · 8–10 min
Included with full SC-900 lab access
LAB 21 · LOCKED
Segment a network with a virtual network and an NSG rule
Virtual networks · 12–15 min
Included with full SC-900 lab access
LAB 22 · LOCKED
Create an Azure Firewall policy rule
Firewall Policies · 14–18 min
Included with full SC-900 lab access
LAB 23 · LOCKED
Web Application Firewall policy: detection or prevention?
Web Application Firewall policies · 12–15 min
Included with full SC-900 lab access
LAB 24 · LOCKED
Protect a secret in Key Vault
Key vaults · 12–15 min
Included with full SC-900 lab access
LAB 25 · LOCKED
Read Defender for Cloud: secure score, CSPM, recommendations
Defender for Cloud · 10–12 min
Included with full SC-900 lab access
LAB 26 · LOCKED
Defender for Cloud: enable plans and remediate a recommendation
Defender for Cloud · 12–15 min
Included with full SC-900 lab access
LAB 27 · LOCKED
Sentinel: SIEM, SOAR and an incident
Sentinel · 10–12 min
Included with full SC-900 lab access
LAB 28 · LOCKED
Sentinel: connect a data source and turn on a detection
Microsoft Sentinel · 14–18 min
Included with full SC-900 lab access
LAB 29 · LOCKED
Route six alerts to the right Defender product
Defender XDR · 8–10 min
Included with full SC-900 lab access
LAB 30 · LOCKED
Service Trust Portal, privacy principles and compliance score
Service Trust Portal and Compliance Manager · 10–12 min
Included with full SC-900 lab access
LAB 31 · LOCKED
Compliance Manager: assess, assign and improve your score
Purview Compliance Manager · 15–18 min
Included with full SC-900 lab access
LAB 32 · LOCKED
Publish a sensitivity label and policy
Purview Information Protection · 10–12 min
Included with full SC-900 lab access
LAB 33 · LOCKED
Stop sensitive data leaving: a DLP policy
Purview Data loss prevention · 12–15 min
Included with full SC-900 lab access
LAB 34 · LOCKED
Keep or delete: retention labels, policies and records
Purview Data lifecycle management · 12–15 min
Included with full SC-900 lab access
LAB 35 · LOCKED
Insider risk, eDiscovery or audit? Pick the tool and search
Purview Audit and investigation tools · 12–15 min
Included with full SC-900 lab access
LAB 36 · LOCKED
eDiscovery and audit: build a case, place a hold and search
Purview eDiscovery and Audit · 15–18 min
Included with full SC-900 lab access
Troubleshooting challenges
Inspect evidence, identify the cause, make a safe fix and verify it. 3 separate exercises, included with full SC-900 lab access.
Everyone can still sign in without MFA
6–8 min
Locked · Full lab access required
A confidential file left the company
6–8 min
Locked · Full lab access required
Secure score dropped overnight
6–8 min
Locked · Full lab access required
SC-900 hands-on labs — questions
- Does SC-900 have labs, and can I practise them without a tenant?
- Yes. ExamIT Lab gives you 36 guided SC-900 labs in a simulated Microsoft Entra, Defender and Purview portals. Nothing is deployed to a real Microsoft tenant, subscription or device, so there is nothing to set up, nothing to pay Microsoft for, and nothing you can break.
- Are the SC-900 labs free?
- The first 5 labs in the learning order are free, repeatable and never expire — no credit card and no sign-up required to start. The full course of 36 labs plus 3 troubleshooting challenges is a one-time purchase with no subscription.
- What does a SC-900 lab look like?
- Each lab opens a realistic simulation of simulated Microsoft Entra, Azure, Defender and Purview consoles — Zero Trust and defense-in-depth decisions, identity types and hybrid sync, authentication methods and SSPR, Conditional Access, roles, access reviews, PIM, ID Protection, entitlement management, Azure Firewall and WAF, Key Vault, Defender for Cloud, Sentinel, the Defender XDR family, sensitivity labels, DLP, retention, eDiscovery, audit and Compliance Manager. You get a task brief, a guided or independent mode, progressive hints and a "Check configuration" button that grades the actual end state you left behind — not just the buttons you clicked.
- Do the labs cover the current SC-900 exam outline?
- The labs are mapped to the objectives in Microsoft's current SC-900 study guide, and we re-audit the mapping when Microsoft updates the skills measured. Combine them with the SC-900 practice test on ExamIT Lab for full coverage.
- Is there a certificate at the end?
- Yes. When all 36 labs are complete you can issue a certificate of completion in your account: a PDF with your name and a unique ID, an Add to LinkedIn link and a public verification page. Before issuing, the server re-runs the course grader on every lab you saved, so it reflects work you really did. It certifies completion of this course; it is independent training, not an official certification.
- How is this different from a Microsoft Learn sandbox or a trial tenant?
- A trial tenant gives you a blank environment and no feedback. These labs give you a pre-built scenario with fictional users, devices and policies, a clear goal, and automatic checking of your result — so you practise the exact administration workflows the SC-900 exam expects, in minutes, not hours of setup.
Access is per course. Sign in for account progress. After paid access expires, your saved progress is retained and the first five tasks remain free.