SC-900 Microsoft Security Fundamentals Exam

What has been corrected on this page?

Every accepted correction to this page is recorded with the exact change, so readers can see how the page improved over time.

1. 11 July 2026 · corrected by Melik Can Sariyer

   5 flagged findings verified individually: Unverified quote attributed to Ann Johnson (real Microsoft VP) with no verifiable source; unverified quote attributed to Nasrin Rezai/Verizon customer story with no verifiable source; the IBM Cost of a Data Breach 2023 $4.45M figure verified ACCURATE via web search (false positive, left unchanged); the Microsoft 'MFA blocks 99.9%' stat verified ACCURATE and sourced to Microsoft's own official security blog (false positive, left unchanged); the 'passwordless users experience 1/3 the compromise rate' fractional stat verified as NOT matching Microsoft's actual published figures (92%/99.2% fewer compromises), so the specific '1/3' framing was corrected.

   What the page claimed

   "The shared responsibility model is not just contractual -- it is operational. Organizations that assume Microsoft handles security end up with unprotected data. Organizations that understand exactly where their responsibility begins configure effective defenses." -- Ann Johnson, Corporate Vice President of Security, Compliance, and Identity Business Development at Microsoft, from the CyberSecurity Unplugged podcast / "Privileged Identity Management changed how we think about admin access..." -- Nasrin Rezai, CISO, Verizon, from the Microsoft Security Customer Stories series / Microsoft's security research shows that passwordless users experience 1/3 the account compromise rate of password-dependent users.

   What was corrected

   De-attributed both quotes to plain unattributed prose (removed Ann Johnson and Nasrin Rezai attributions, no locatable source for either quote). Softened the passwordless compromise-rate claim from the specific unverifiable '1/3' figure to qualitative language ('substantially lower'), since it did not match Microsoft's actual published figures (92%/99.2% fewer compromises). Removed the now-orphaned Johnson reference-list entry. Left the IBM $4.45M breach-cost figure and the MFA 99.9% stat unchanged as both were verified accurate.

   Why: Applied fact-check fix: de-attributed two unverified quotes (Ann Johnson, Nasrin Rezai), corrected an unverifiable fractional stat, removed orphaned reference entry.

   View the full record →

Who checked this page?

1 contributor has checked "SC-900 Microsoft Security Fundamentals Exam" on Pass4Sure. Each name below links to that person's public CitePep profile, where every contribution they have made is listed with the exact change they proposed.