Expected SC-900 Exam Topics, as suggested by Microsoft :

• Module 1: Describe the concepts of security, compliance, and identity: This exam section covers topics such as describing security and compliance concepts, defining identity concepts, and exploring the concepts of ADS.
• Module 2: Describe the capabilities of Microsoft Entra: This section of the exam covers the function and identity types of Microsoft Entra ID; authentication mechanisms of Microsoft Entra ID, and access management capabilities of Microsoft Entra ID.
• Module 3: Describe the capabilities of Microsoft security solutions: In this section, candidates are tested for their skills in explaining the core infrastructure security services in Azure, security management capabilities of Azure, what are the capabilities of Microsoft Sentinel, and what threat protection with Microsoft Defender XDR.
• Module 4: Describe the capabilities of Microsoft compliance solutions: In this section of the exam, candidates are tested for their knowledge of Microsoft Service Trust Portal and privacy principles, compliance management, data protection, insider risk, eDiscovery, and audit capabilities in Microsoft Purview.