Three real Security, Compliance, and Identity Fundamentals projects mapped directly to the SC-900 exam objectives. Mark a step complete and HandsOnCert commits the evidence — Secure Score reports, Entra ID configs, compliance dashboards — straight to your own GitHub repo. The portfolio employers actually click into.
$29 one-time · Project 1 free · No subscription
Every project maps to an official SC-900 exam domain. Each one ends with evidence committed to your GitHub repo automatically.
Explore Zero Trust principles, review Microsoft Defender for Cloud's Secure Score and recommendations, and explore Microsoft Sentinel's data connectors. Commit your Secure Score screenshots and Sentinel overview evidence.
Describe Security & Microsoft Security Solutions — 35-40% of examExplore Microsoft Entra ID services, review available authentication methods including phishing-resistant options, and explore Conditional Access policy concepts. Commit your Entra services overview and authentication methods screenshots.
Describe Microsoft Entra Capabilities — 25-30% of examExplore Microsoft Purview's Compliance Manager score, review sensitivity label hierarchy, and examine a Data Loss Prevention policy. Commit your Compliance Manager and DLP policy screenshots.
Describe Microsoft Compliance Solutions — 25-30% of examEvery completed step auto-commits evidence to your own repo. No fake portfolio templates — real configs, real screenshots, real history.
No simulators. You work in the actual Azure console and tools, the same ones you'll use on the job and in the SC-900 exam.
Stuck on a step or an exam concept? Cert Buddy is trained on SC-900 objectives and helps you debug and understand — not just copy-paste.
Every chargeable resource has a clear alert telling you exactly when to stop, deallocate, or delete — so a lab break doesn't become a surprise bill.
Get the full SC-900 lab guide as a PDF — step-by-step instructions, screenshots to capture, and an exam quick-reference section.
$29 once. No subscription, no recurring charges. Or get All-Access to all 21 cert paths for $199.
Are the SC-900 hands-on labs free?
Project 1 (Security Concepts and Microsoft Defender) is completely free, including unlimited access to Cert Buddy for that project and the manual GitHub commit workflow. The remaining 2 projects unlock for a one-time payment of $29.
Do I need an Azure subscription for SC-900 labs?
Yes, plus a Microsoft 365 trial for Purview and a 30-day Entra ID P2 trial for PIM and Conditional Access features. All labs are designed to fit within free trials — total cost should be near $0.
How does the GitHub portfolio auto-commit work for SC-900?
When you mark a lab step complete, HandsOnCert commits your portal screenshots — Secure Score, Compliance Manager, Entra ID services — directly to your own GitHub repository via OAuth.
How long does the SC-900 path take to complete?
The 3 projects take approximately 4 hours total, covering security concepts and Microsoft Defender, identity and access with Entra, and compliance and privacy — the same domains tested on the SC-900 exam.
Is SC-900 a good certification to start with?
SC-900 is the entry-level Microsoft security credential with no prerequisites — a strong starting point for IT support, helpdesk, or business roles at organizations using Microsoft 365 and Azure. It's also recommended before SC-300 (Identity and Access Administrator).
What is SC-500 and how does it relate to SC-900?
SC-500 (Microsoft Cloud and AI Security Engineer Associate) is a more advanced certification covering cloud and AI security, replacing AZ-500 (retiring August 31, 2026). SC-500 entered beta in May 2026 with GA expected July 2026. SC-900 provides foundational concepts useful before attempting SC-500.
Start Project 1 free — no credit card required. See exactly how the GitHub auto-commit works before you pay anything.
Start Free →