SC-400: Microsoft Information Protection Administrator

Course: SC-400 Microsoft Information Protection Administrator

Learn how to protect information in your Microsoft 365 deployment. This course focuses on data governance and information protection within the organization. The course covers the implementation of data loss prevention policies, sensitive information types, sensitivity labels, data retention policies, and Microsoft Purview message encryption, among other related topics. The course helps students prepare for the Microsoft Information Protection Administrator (SC-400) exam.

Target audience

The Information Protection Administrator plans and implements controls that meet an organization’s compliance needs. This person is responsible for translating requirements and compliance controls into technical implementation. They help organizational control owners become and stay compliant. They work with information technology (IT) personnel, business application owners, human resources, and legal stakeholders to implement technology that supports the policies and controls necessary to address the regulatory requirements of their organization. They also work with compliance and security management, such as a Chief Compliance Officer and Security Officer, to evaluate the full range of business risks and associate them with developing those policies. This person defines the applicable requirements and tests IT operations and processes against those policies and controls. They are responsible for creating policies and rules for content classification, data loss prevention, governance, and protection.

SC-400 training elements

• Introduction to information protection and data lifecycle management in Microsoft Purview (6 Units)
• Prevent data loss (4 Units)
• Classify data for protection and governance (7 Units)
• Creating and managing sensitive information types (8 Units)
• Understanding Microsoft 365 encryption (6 Units)
• Implementing Microsoft Purview message encryption (6 Units)
• Protect information in Microsoft Purview (6 Units)
• Applying and managing sensitivity labels (8 Units)
• Prevent data loss in Microsoft Purview (10 Units)
• Configuring DLP policies for Microsoft Defender for Cloud Apps and Power Platform (7 Units)
• Managing data loss prevention reports and policies in Microsoft 365 (9 Units)
• Manage the data lifecycle in Microsoft Purview (8 Units)
• Managing data retention in Microsoft 365 workloads (11 Units)
• Manage records in Microsoft Purview (7 Units)

SC-400 course content

Module 1: Implementing Information Protection in Microsoft Purview

Organizations require information protection solutions to protect data against theft and accidental loss. Learn how to protect sensitive information. Learn about Microsoft Purview information protection and governance solutions that help you protect and govern data, throughout its lifecycle, wherever it lives or travels. Learn about the information available to help you understand your data landscape and know your data. Learn how to use sensitive information types to support your information protection strategy. Learn how sensitivity labels are used to classify and protect business data, ensuring that user productivity and their ability to collaborate are not hindered.

Lessons

• Introduction to information protection in Microsoft Purview

• Classify data for protection and governance

• Create and manage sensitive information types

• Describe Microsoft 365 encryption

• Implement Microsoft Purview message encryption

• Protect information in Microsoft Purview

• Apply and manage sensitivity labels

Lab: Implement Information Protection

• Manage compliance roles
• Manage Microsoft Purview message encryption
• Manage sensitive information types
• Manage trainable classifiers
• Manage sensitivity labels

After completing this module, students will be able to:

• Describe Microsoft's approach to information protection and governance

• List the components of the data classification solution

• Describe how to use sensitive information types and trainable classifiers

• Implement document fingerprinting

• Create custom keyword dictionaries

• Implement message encryption in Microsoft Purview

Module 2: Implementing Data Loss Prevention

This module describes how to implement data loss prevention techniques to protect Microsoft 365 data. Learn how to detect, classify, and protect business-critical and sensitive content throughout its lifecycle across the organization. Learn how to configure and implement data loss prevention policies and integrate them with Microsoft Defender for Cloud Apps. Learn how to respond to and remediate data loss policy violations.

Lessons

• Data loss prevention with Microsoft Purview

• Implement endpoint data loss prevention

• Configure DLP policies for Microsoft Defender for Cloud Apps and Power Platform

• Manage DLP reports and policies in Microsoft Purview

Lab: Implement Data Loss Prevention

• Manage DLP policies
• Manage endpoint DLP
• Manage DLP reports

After completing this module, students will be able to:

• Describe the information protection configuration process

• Implementation and adoption best practices

• Describe DLP integration with Microsoft Defender for Cloud Apps.

• Configure policies in Microsoft Defender for Cloud Apps.

• Review and analyze DLP reports

• Identify and mitigate DLP policy violations

• Mitigate DLP violations in Microsoft Defender for Cloud Apps.

Module 3: Implementing Data Lifecycle and Records Management

In this module, you will learn how to plan and implement information governance strategies for an organization. Learn how to manage content lifecycle using solutions to import, store, and classify business-critical data, so you can keep what you need and delete what you don't. Learn how to manage retention in Microsoft 365 and implement retention solutions in individual Microsoft 365 services. Learn how to use intelligent classification to automate and simplify retention scheduling for regulatory, legal, and business-critical records in your organization.

Lessons

• Manage the data lifecycle in Microsoft Purview

• Managing data retention in Microsoft 365 workloads

• Manage records in Microsoft Purview

Lab: Implementing Data Lifecycle and Records Management

• Configure retention labels
• Implement retention labels
• Configure service-based retention
• Configure event-based retention
• Use eDiscovery for recovery
• Configure records management

After completing this module, students will be able to:

• Describe the information governance configuration process

• Implementation and adoption best practices

• Describe retention features in Microsoft 365 workloads

• Configure retention settings in Microsoft Teams and SharePoint Online

• Implement retention for Exchange mailbox items

• Recover content protected by retention settings

• Recover protected items from Exchange mailboxes

• Describe the records management configuration process

Prerequisites

Before attending this course, students should have:

• Foundational knowledge of Microsoft security and compliance technologies

• Basic knowledge of information protection concepts

• Understanding of cloud computing concepts.

• Understanding of Microsoft 365 products and services

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Associate Certification: Information Protection and Compliance Administrator Associate

Microsoft Certified: Information Protection and Compliance Administrator Associate

Demonstrate the fundamentals of data security, lifecycle management, information security, and compliance to protect a Microsoft 365 implementation.

Level: Intermediate
Role: Administrator
Product: Microsoft 365
Subject: Security