SC-401 Information Security Administrator

Target group

As an Information Security Administrator, you plan and implement information security for sensitive data using Microsoft Purview and related services. You’re responsible for mitigating risks by protecting data within Microsoft 365 collaboration environments from internal and external threats, as well as safeguarding data used by AI services. Your role involves implementing information protection, data loss prevention (DLP), retention, and insider risk management. You also manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. In this role, you collaborate with other roles responsible for governance, data, and security to develop policies that address your organization’s information security and risk reduction goals. You work with workload administrators, business application owners, and governance stakeholders to implement technology solutions that support these policies and controls.

Course structure

Module 1: Implement Microsoft Purview Information Protection

• The growing need for data protection
• The challenges of managing sensitive data
• Protect data in a Zero Trust world
• Understand data classification and protection
• Prevent data leaks and insider threats
• Manage security alerts and respond to threats
• Protect AI-generated and AI-processed data

Module 2: Classify data for protection and governance

• Data classification overview
• Classify data using sensitive information types
• Classify data using trainable classifiers
• Create a custom trainable classifier

Module 3: Review and analyze data classification and protection

• Review classification and protection insights
• Analyze classified data with data and content explorer
• Monitor and review actions on labeled data

Module 4: Create and manage sensitive information types

• Sensitive information type overview
• Compare built-in versus custom sensitive information types
• Create and manage custom sensitive information types
• Create and manage exact data match sensitive info types
• Implement document fingerprinting
• Describe named entities
• Create a keyword dictionary

Module 5: Create and configure sensitivity labels with Microsoft Purview

• Sensitivity label overview
• Create and configure sensitivity labels and label policies
• Configure encryption with sensitivity labels
• Implement auto-labeling policies
• Use the data classification dashboard to monitor sensitivity labels

Module 6: Apply sensitivity labels for data protection

• Foundations of sensitivity label integration in Microsoft 365
• Manage sensitivity labels in Office apps
• Apply sensitivity labels with Microsoft 365 Copilot for secure collaboration
• Protect meetings with sensitivity labels
• Apply sensitivity labels to Microsoft Teams, Microsoft 365 groups, and SharePoint sites
• Module 7: Classify and protect on-premises data with Microsoft Purview
• Protect on-premises files with Microsoft Purview
• Prepare your environment for the Microsoft Purview Information Protection scanner
• Configure and install the Microsoft Purview Information Protection scanner
• Run and manage the scanner
• Enforce data loss prevention policies on on-premises files

Module 8: Understand Microsoft 365 encryption

• Introduction to Microsoft 365 encryption
• Learn how Microsoft 365 data is encrypted at rest
• Understand service encryption in Microsoft Purview
• Explore customer key management using Customer Key
• Learn how data is encrypted in-transit

Module 9: Deploy Microsoft Purview Message Encryption

• Implement Microsoft Purview Message Encryption
• Implement Microsoft Purview Advanced Message Encryption
• Use Microsoft Purview Message Encryption templates in mail flow rules