This SC 900 study plan follows the exam's own domain weights rather than splitting time evenly: Microsoft security solutions gets the most attention at 38%, Microsoft Entra is next at 28%, Microsoft compliance solutions gets 22%, and foundational concepts get 12%. Choose the 4-, 8-, or 12-week version below depending on how much time you have before your exam date.
A good SC 900 study plan is not four equal blocks of time. Microsoft weights each domain differently in your score, so this plan allocates study time the same way: more time on Microsoft security solutions, less on the smaller concepts domain, and Microsoft Entra and Microsoft compliance solutions in between.
Domain weights driving this SC-900 study plan
| Domain | Weight |
|---|---|
| Security, compliance, and identity concepts | 12% |
| Microsoft Entra | 28% |
| Microsoft security solutions | 38% |
| Microsoft compliance solutions | 22% |
4-week study plan
- Week 1 — Security, compliance, and identity concepts, plus start Microsoft Entra: shared responsibility model, defense-in-depth, Zero Trust, identity as the primary security perimeter, authentication versus authorization.
- Week 2 — Finish Microsoft Entra: authentication methods, MFA, Conditional Access, RBAC, access reviews, Privileged Identity Management, and Microsoft Entra ID Protection.
- Week 3 — Microsoft security solutions, the heaviest domain: Azure network protection (Firewall, WAF, NSGs, Bastion, Key Vault), Microsoft Defender for Cloud, and the Microsoft Sentinel and Microsoft Defender XDR pairing.
- Week 4 — Microsoft compliance solutions plus full review: Microsoft Purview classification, sensitivity labels, data loss prevention, retention, insider risk, eDiscovery, and audit. Finish with a full-length timed mock.
8-week study plan
Use the same four-block order as the 4-week plan, but give each domain roughly double the time, and add a dedicated review week before your booked date. Spend the extra time on the domains you found hardest during week one's self-assessment, rather than distributing it evenly — if Microsoft Entra felt shaky, give it more of the extra time than the smaller concepts domain.
12-week study plan
With more runway, spread each domain across multiple weeks and interleave short review sessions between domains instead of saving all review for the end. A reasonable shape: an early period on concepts and Microsoft Entra together, since they build on each other, a longer middle period on Microsoft security solutions given its weight, a period on Microsoft compliance solutions, and a final stretch of mixed-domain review and full mocks. This plan suits anyone studying alongside a full-time job, since it avoids the compressed cramming the 4-week plan requires.
What counts as SC-900 training or a study guide
There is no single official SC-900 course required to prepare — Microsoft's own study guide simply lists the objective statements this plan is built from. Any combination of reading the exam objectives page closely, working through Microsoft Learn modules for topics you find unfamiliar, and testing yourself with sample questions counts as valid SC-900 training. What matters is coverage of every domain, not which specific course you follow.
Building weekly review into any study plan
Regardless of which schedule you pick, build in a short review at the start of each new block that revisits the domain you just finished. Fundamentals-level exams reward broad recall over deep repetition, so a quick pass back through last week's objective list does more for retention than adding extra hours to the current domain. If a term from an earlier domain still feels unfamiliar when it resurfaces, note it down and revisit it again before your booked exam date rather than assuming it will stick on its own.
How to prepare for SC-900 without wasting time
The biggest time-waster in most study plans is spending equal effort on every domain regardless of weight. Avoid that here: check the exam objectives page for the full weighted list, confirm you meet the prerequisites before you start, and once you are through this plan, rehearse under real time pressure using a practice test rather than only reading through material passively.
Exam facts on this page come from Microsoft’s own pages (official exam page). Prices, versions and policies change — confirm there before you book.