Tag not monitored by Microsoft.
For SC-900, what is tested is the published skills measured for the current version of the exam. In the provided SC-900 change log, the skill areas listed as of July 28, 2026 are:
- Describe the capabilities of Microsoft Entra
- Describe the capabilities of Microsoft security solutions
- Describe the capabilities of Microsoft compliance solutions
The change log also shows examples of objectives under those areas, such as:
- Describe function and identity types of Microsoft Entra ID
- Describe access management capabilities of Microsoft Entra ID
- Describe core infrastructure security services in Azure
- Describe capabilities of Microsoft Sentinel
- Describe Microsoft Service Trust Portal and privacy principles
In the provided material, there is no mention of Copilot being added to SC-900 skills measured. If Microsoft Learn pages elsewhere include Copilot-related content, that does not change the exam scope shown in the SC-900 skills measured page from the provided context.
For the items listed such as information barriers, communication compliance, customer lockbox, Priva, data residency, sovereignty, and data privacy, the provided SC-900 context does not list them in the current skills measured excerpt. The only compliance/privacy-related item explicitly shown in the provided SC-900 context is Microsoft Service Trust Portal and privacy principles.
So, based on the provided context, the safest interpretation is:
- Study the current SC-900 skills measured as the exam scope.
- Do not assume Copilot is tested on SC-900 unless it appears in the official SC-900 skills measured.
- Do not assume every topic seen in practice questions is in scope unless it appears in the current published skills measured.