SC-401: Protect sensitive information with Microsoft Purview in the AI ​​era

SC-401 Course: Protect sensitive information with Microsoft Purview in the AI era

The Information Security Administrator course provides you with the skills necessary to plan and implement information security for sensitive data using Microsoft Purview and related services.

The course covers essential topics such as information protection, data loss prevention (DLP), retention, and insider risk management.

You will learn how to protect data in Microsoft 365 collaboration environments from internal and external threats. Additionally, you will learn how to manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases.

You will also learn how to protect data used by AI services in Microsoft environments and implement controls to safeguard content in these environments.

Virtual course with included certification exam as a gift. Don't miss this opportunity! The exam is valued at €126 + VAT and is included at no additional cost.

Promotion valid until December 31, 2026. One-attempt exam available only in Virtual - E-learning modality. Not applicable to Self-Learning modality.

Level: Intermediate - Role: Administrator, Information Protection and Compliance Administrator, Risk Practitioner -  Product: Microsoft 365, Microsoft Purview  - Subject: Security

Microsoft 365 Information Security - Microsoft Purview - Data Loss Prevention DLP - Insider Risk Management - Cloud Security - Data Protection with AI

Course Audience

As an Information Security Administrator, you will plan and implement information security for sensitive data using Microsoft Purview and related services. You will be responsible for mitigating risks by protecting data in Microsoft 365 collaboration environments from internal and external threats, as well as safeguarding data used by AI services. Your role involves implementing information protection, data loss prevention (DLP), retention, and insider risk management. You will also manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. In this role, you will collaborate with other governance, data, and security stakeholders to develop policies that address your organization's information security and risk reduction goals. You will work with workload administrators, business application owners, and governance stakeholders to implement technological solutions that support these policies and controls.

Training Objectives

• Implement Information Protection: You will learn to use Microsoft Purview and other related services to protect sensitive data within Microsoft 365 collaboration environments.
  
• Prevent Data Loss (DLP): You will configure DLP policies to monitor and prevent sensitive data leakage.
  
• Manage Data Retention: You will implement retention policies to ensure data is kept in compliance with regulatory and organizational requirements.
  
• Manage Insider Risks: You will learn to identify and mitigate insider risks by managing security alerts and responding to incidents.
  
• Protect Data Used by AI Services: You will implement controls to protect data used by artificial intelligence services within Microsoft environments.

SC-401 Training Elements

• Implementing Microsoft Purview Information Protection (9 modules)
• Implementing and Managing Microsoft Purview Data Loss Prevention (4 modules)
• Implementing and Managing Microsoft Purview Insider Risk Management (5 modules)
• Protecting AI Interactions and Environments with Microsoft Purview (4 modules)
• Implementing and Managing Microsoft 365 Retention and Recovery (2 modules)
• Microsoft Purview Audit and Search Activity (2 modules)

SC-401 Course Content Protect Sensitive Information with Microsoft Purview in the AI Era

Unit 1. Implementing Information Protection

Lessons

• Protecting sensitive data in a digital world
• Classifying data for protection and governance
• Reviewing and analyzing data classification and protection
  
• Creating and managing sensitive information types
  
• Creating and managing sensitivity labels with Microsoft Purview
  
• Applying and managing sensitivity labels
  
• Describing Microsoft 365 encryption
  
• Implementing message encryption in Microsoft Purview

Labs: Implementing Information Protection

• Exercise 0: Preparing the environment for administration
  
• Exercise 1: Managing compliance and security roles
  
• Exercise 2: Creating and managing sensitive information types
  
• Exercise 3: Creating and managing sensitivity labels
  
• Exercise 4: Implementing Microsoft Purview message encryption

Unit 2. Implementing and Managing Data Loss Prevention

Lessons

• Planning and designing data loss prevention policies
• Creating and managing DLP policies 
• Implementing endpoint data loss prevention
• Investigating DLP alerts in Microsoft Purview

Lab: Implementing and Managing Data Loss Prevention

• Exercise 1: Implementing and managing DLP policies
• Exercise 2: Implementing and managing endpoint DLP

Unit 3. Implementing and Managing Microsoft Purview Retention and Recovery

Lessons

• Describing retention in Microsoft Purview
• Implementing and managing Microsoft Purview retention and recovery

Lab: Configuring Retention Policies

• Exercise 1: Configure retention policies

Unit 4. Implementing and Managing Microsoft Purview Insider Risk Management

Lessons

• Planning and preparing for insider risk management
• Configuring and managing insider risk data connectors
• Creating and managing insider risk policies
• Managing the insider risk management workflow
• Investigating insider risk management activities
• Implementing adaptive protection in insider risk management

Lab: Implementing and Managing Microsoft Purview Insider Risk Management

• Exercise 1: Implement Insider Risk Management
• Exercise 2: Implement Adaptive Protection

Unit 5. Microsoft Purview Audit and Search Activity

Lessons

• Searching and investigating with Microsoft Purview audit
• Supporting investigations with Microsoft Purview content search

Lab: Implementing and managing retention and recovery with Microsoft Purview

• Exercise 1: Search the Audit log
• Exercise 2: Perform a content search

Unit 6. Protecting AI Interactions and Environments with Microsoft Purview

Lessons

• Describing Microsoft Purview protections for AI
• Using DSPM for AI to understand AI usage and identify exposure
• Detecting AI interactions with Microsoft Purview
• Protecting sensitive data in AI interactions
• Controlling AI prompts and responses
• Detecting and addressing risky AI use

Lab: Protecting Data in AI Environments with Microsoft Purview

• Exercise: Protect data in AI environments

Unit 7. Validating Sensitivity, DLP, and Retention Policies

Lab Exercise: Validating Sensitivity, DLP, and Retention Policies

You will verify that the policies you have configured—sensitivity labels, DLP, and retention—function as intended in Microsoft 365 applications. This exercise helps confirm that content:

• Is labeled and protected in Microsoft Word, DLP blocks it when sensitive information is shared in Outlook
• Is retained and labeled appropriately in SharePoint

Prerequisites

Before attending this course, students should have:

• Familiarity with Microsoft Purview compliance solutions
• Basic understanding of security and data protection concepts
• Basic knowledge of Microsoft security and compliance technologies
• Basic knowledge of information protection concepts
  
• Basic knowledge of Microsoft 365 data governance functionalities
  
• Basic knowledge of audit logs and content detection
  

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Associate Certification: Information Security Administrator Associate

Microsoft Certified: Information Security Administrator Associate

Demonstrate the fundamentals of data security, lifecycle management, information security, and compliance to protect a Microsoft 365 deployment.

Level: Intermediate
Role: Administrator
Product: Microsoft 365 Security Center
Subject: Security