SC-400: Microsoft Information Protection Administrator

Course: SC-400 Microsoft Information Protection Administrator

Learn how to protect information in the Microsoft 365 deployment. This course focuses on data governance and information protection within the organization. The course covers the implementation of data loss prevention policies, types of sensitive information, sensitivity labels, data retention policies, and Microsoft Purview message encryption, among other related topics. The course helps students prepare for the Microsoft Information Protection Administrator (SC-400) exam.

Course intended for

The information protection administrator plans and implements controls that meet the organization's compliance needs. This person is responsible for translating compliance requirements and controls into technical implementation. They help organizational control owners meet requirements. They work with information technology (IT) staff, enterprise application owners, human resources, and legal stakeholders to implement technology that supports the policies and controls needed to address your organization's regulatory requirements. They also work with compliance and security leadership, such as a compliance officer and security officer, to assess the full range of associated and third-party business risks and develop those policies. This person defines the applicable requirements and tests IT operations and processes against those policies and controls. They are responsible for creating policies and rules for content classification, data loss prevention, governance, and protection.

SC-400 Training Elements

• Introduction to information protection and data lifecycle management in Microsoft Purview (6 Units)
• Prevent data loss (4 Units)
• Classify data for protection and governance (7 Units)
• Creating and managing sensitive information types (8 Units)
• Describing Microsoft 365 encryption (6 Units)
• Implementing Microsoft Purview message encryption (6 Units)
• Protect information in Microsoft Purview (6 Units)
• Applying and managing sensitivity labels (8 Units)
• Prevent data loss in Microsoft Purview (10 Units)
• Configuring DLP policies for Microsoft Defender for Cloud Apps and Power Platform (7 Units)
• Managing data loss prevention reports and policies in Microsoft 365 (9 Units)
• Manage the data lifecycle in Microsoft Purview (8 Units)
• Managing data retention in Microsoft 365 workloads (11 Units)
• Manage records in Microsoft Purview (7 Units)

SC-400 Course Content

Module 1: Implementing Information Protection in Microsoft Purview

Organizations require information protection solutions to protect data from theft and accidental loss. Learn how to protect sensitive information. Learn about Microsoft Purview information governance and protection solutions that help you protect and regulate data throughout its lifecycle, wherever it is or travels. Learn about the information available to help you understand the data landscape and your data. Learn how to use sensitive information types to support your information protection strategy. Learn how sensitivity labels are used to classify and protect business data, ensuring that user productivity and collaboration capabilities are not adversely affected.

Lessons

• Introduction to information protection in Microsoft Purview

• Classifying data for protection and governance

• Creating and managing sensitive information types

• Describing Microsoft 365 encryption

• Implementing message encryption with Microsoft Purview

• Protecting information in Microsoft Purview

• Applying and managing sensitivity labels

Lab: Implement Information Protection

• Managing compliance roles
• Managing Microsoft Purview message encryption
• Managing sensitive information types
• Managing trainable classifiers
• Managing sensitivity labels

After completing this module, students will be able to:

• Describe Microsoft's approach to information protection and governance

• List the components of the data classification solution

• Describe how to use sensitive information types and trainable classifiers

• Implement document fingerprints

• Create custom keyword dictionaries

• Implement message encryption in Microsoft Purview

Module 2: Implementing Data Loss Prevention

This module describes how to implement data loss prevention techniques to protect Microsoft 365 data. Learn how to detect, classify, and protect sensitive and business-critical content throughout its lifecycle across the organization. Learn how to configure and implement data loss prevention policies and integrate them with Microsoft Defender for Cloud Apps. Learn how to respond to and remediate data loss policy violations.

Lessons

• Data loss prevention with Microsoft Purview

• Implementing endpoint data loss prevention

• Configuring DLP policies for Microsoft Defender for Cloud Apps and Power Platform

• Managing DLP reports and policies in Microsoft Purview

Lab: Implement Data Loss Prevention

• Managing DLP policies
• Managing the DLP endpoint
• Managing DLP reports

After completing this module, students will be able to:

• Describe the information protection setup process

• Best practices for implementation and adoption

• Describe DLP integration with Microsoft Defender for Cloud Apps.

• Configure policies in Microsoft Defender for Cloud Apps.

• Review and analyze DLP reports

• Identify and mitigate DLP policy violations

• Mitigating DLP violations in Microsoft Defender for Cloud Apps.

Module 3: Implementing Records Management and Data Lifecycle Management

In this module, you will learn how to plan and implement information governance strategies for an organization. Learn how to manage the content lifecycle using solutions to import, store, and classify business-critical data, so you can retain what you need and delete what you don't need. Learn how to manage Microsoft 365 retention and implement retention solutions in individual Microsoft 365 services. Learn how to use intelligent classification to automate and simplify the scheduling of regulatory, legal, and business-critical records retention in your organization.

Lessons

• Managing the data lifecycle in Microsoft Purview

• Managing data retention in Microsoft 365 workloads

• Managing records in Microsoft Purview

Lab: Implementing Records Management and Data Lifecycle Management

• Configuring retention labels
• Implementing retention labels
• Configuring service-based retention
• Configuring event-based retention
• Using eDiscovery for recovery
• Configuring records management

After completing this module, students will be able to:

• Describe the information governance setup process

• Best practices for implementation and adoption

• Describe retention features in Microsoft 365 workloads

• Configure retention options in Microsoft Teams and SharePoint Online

• Implement retention for Exchange mailbox items

• Recover content protected by retention settings

• Recover items protected from Exchange mailboxes

• Describe the records management setup process

Prerequisites

Before participating in this course, students must have:

• Foundational knowledge of Microsoft security and compliance technologies

• Basic knowledge of information protection concepts

• An overview of cloud computing concepts.

• An overview of Microsoft 365 products and services

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Associate Certification: Information Protection and Compliance Administrator Associate

Microsoft Certified: Information Protection and Compliance Administrator Associate

Demonstrate foundational aspects of data security, lifecycle management, information security, and compliance to protect a Microsoft 365 deployment.

Level: Intermediate
Role: Administrator
Product: Microsoft 365
Subject: Security