SC-401: Information Security Administrator Associate | Protect sensitive information with Microsoft Purview in the AI era

SC-401 Course: Protect sensitive information with Microsoft Purview in the AI era

The Information Security Administrator course provides you with the skills needed to plan and implement information security for sensitive data using Microsoft Purview and related services.

The course covers essential topics such as information protection, data loss prevention (DLP), retention, and insider risk management.

You will learn to protect data in Microsoft 365 collaboration environments against internal and external threats. In addition, you will learn to manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases.

You will also learn to protect the data used by AI services in Microsoft environments and implement controls to safeguard content in these environments.

Virtual course with certification exam included free of charge. Don't miss this opportunity! The exam is valued at €126 + VAT and is included at no additional cost.

Promotion valid until December 31, 2026. One-attempt exam available only in Virtual - Distance Learning format.

Level: Intermediate - Role: Administrator, Information Protection and Compliance Administrator, Risk Practitioner - Product: Microsoft 365, Microsoft Purview - Subject: Security

Microsoft 365 Information Security - Microsoft Purview - Data Loss Prevention DLP - Insider Risk Management - Cloud Security - Data Protection with AI

Course intended for

As an Information Security Administrator, you will plan and implement information security for sensitive data using Microsoft Purview and related services. You will be responsible for mitigating risks by protecting data in Microsoft 365 collaboration environments against internal and external threats, as well as safeguarding the data used by AI services. Your role involves implementing information protection, data loss prevention (DLP), retention, and insider risk management. You will also manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. In this role, you will collaborate with other governance, data, and security owners to develop policies that address your organization's information security and risk reduction objectives. You will work with workload administrators, enterprise application owners, and governance stakeholders to implement technology solutions that support these policies and controls.

Training objectives

• Implement information protection: You will learn to use Microsoft Purview and other related services to protect sensitive data within Microsoft 365 collaboration environments.
  
• Prevent data loss (DLP): You will configure DLP policies to monitor and prevent the leakage of sensitive data.
  
• Manage data retention: You will implement retention policies to ensure that data is maintained in accordance with regulatory and organizational requirements.
  
• Manage insider risks: You will learn to identify and mitigate insider risks by managing security alerts and responding to incidents.
  
• Protect data used by AI services: You will implement controls to protect data used by artificial intelligence services within Microsoft environments.

SC-401 Training Elements

• Microsoft Purview Information Protection Implementation (9 modules)
• Microsoft Purview Data Loss Prevention Implementation and Management (4 modules)
• Microsoft Purview Insider Risk Management Implementation and Management (5 modules)
• Protecting AI Interactions and Environments with Microsoft Purview (4 modules)
• Microsoft 365 Retention and Recovery Implementation and Management (2 modules)
• Microsoft Purview Audit Activity and Search (2 modules)

SC-401 Protect Sensitive Information with Microsoft Purview in the AI Era Course Content

Unit 1. Information Protection Implementation

Lessons

• Protecting sensitive data in a digital world
• Data classification for protection and governance
• Review and analysis of data classification and protection
  
• Creating and managing sensitive information types
  
• Creating and managing sensitivity labels with Microsoft Purview
  
• Applying and managing sensitivity labels
  
• Describe Microsoft 365 encryption
  
• Microsoft Purview Message Encryption Implementation

Labs: Information Protection Implementation

• Exercise 0: Prepare the environment for management
  
• Exercise 1: Manage compliance and security roles
  
• Exercise 2: Create and manage sensitive information types
  
• Exercise 3: Create and manage sensitivity labels
  
• Exercise 4: Microsoft Purview Message Encryption Implementation

Unit 2. Data Loss Prevention Implementation and Management

Lessons

• Planning and designing data loss prevention policies
• Creating and managing DLP policies 
• Implement endpoint data loss prevention
• Investigating DLP alerts in Microsoft Purview

Lab: Data Loss Prevention Implementation and Management

• Exercise 1: DLP Policy Implementation and Management
• Exercise 2: Endpoint DLP Implementation and Management

Unit 3. Microsoft Purview Retention and Recovery Implementation and Management

Lessons

• Description of retention in Microsoft Purview
• Microsoft Purview Retention and Recovery Implementation and Management

Lab: Configure retention policies

• Exercise 1: Configure retention policies

Unit 4. Microsoft Purview Insider Risk Management Implementation and Management

Lessons

• Plan and prepare insider risk management
• Configuration and management of insider risk data connectors
• Create and manage insider risk policies
• Manage the insider risk management workflow
• Investigating insider risk management activities
• Implement adaptive protection in insider risk management

Lab: Microsoft Purview Insider Risk Management Implementation and Management

• Exercise 1: Implement Insider Risk Management
• Exercise 2: Implement Adaptive Protection

Unit 5. Microsoft Purview Audit Activity and Search

Lessons

• Search and investigation with Microsoft Purview audit
• Support investigations with Microsoft Purview content search

Lab: Microsoft Purview Retention and Recovery Implementation and Management

• Exercise 1: Search the Audit log
• Exercise 2: Perform a content search

Unit 6. Protecting AI Interactions and Environments with Microsoft Purview

Lessons

• Description of Microsoft Purview AI protections
• Using AI DSPM to understand AI usage and identify exposure
• Detecting AI interactions with Microsoft Purview
• Protecting sensitive data in AI interactions
• Controlling AI prompts and responses
• Detecting and addressing risky AI usage

Lab: Protecting Data in AI Environments with Microsoft Purview

• Exercise: Protect data in AI environments

Unit 7. Sensitivity, DLP, and Retention Policy Validation

Lab exercise: Sensitivity, DLP, and retention policy validation

You will verify that the policies you have configured, sensitivity labels, DLP, and retention work as intended in Microsoft 365 applications. This exercise helps confirm that content:

• Is labeled and protected in Microsoft Word; DLP blocks it when sensitive information is shared in Outlook
• Is retained and labeled correctly in SharePoint

Prerequisites

Before participating in this course, students must have:

• Familiarity with Microsoft Purview compliance solutions
• Basic understanding of security and data protection concepts
• Basic knowledge of Microsoft security and compliance technologies
• Basic knowledge of information protection concepts
  
• Basic knowledge of Microsoft 365 data governance features
  
• Basic knowledge of audit logs and content detection
  

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Associate Certification: Information Security Administrator Associate

Microsoft Certified: Information Security Administrator Associate

Demonstrate the fundamentals of data security, lifecycle management, information security, and compliance to protect a Microsoft 365 deployment.

Level: Intermediate
Role: Administrator
Product: Microsoft 365 Security Center
Subject: Security