SC-401T00 : Information Security Administrator

As an Information Security Administrator, you plan and implement information security for sensitive data using Microsoft Purview and related services. You’re responsible for mitigating risks by protecting data within Microsoft 365 collaboration environments from internal and external threats, as well as safeguarding data used by AI services. Your role involves implementing information protection, data loss prevention (DLP), retention, and insider risk management. You also manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. In this role, you collaborate with other roles responsible for governance, data, and security to develop policies that address your organization’s information security and risk reduction goals. You work with workload administrators, business application owners, and governance stakeholders to implement technology solutions that support these policies and controls.

Implement Microsoft Purview Information Protection

·       Protect sensitive data in a digital world

·       Classify data for protection and governance

·       Review and analyze data classification and protection

·       Create and manage sensitive information types

·       Create and configure sensitivity labels with Microsoft Purview

·       Apply sensitivity labels for data protection

·       Classify and protect on-premises data with Microsoft Purview

·       Understand Microsoft 365 encryption

·       Protect email with Microsoft Purview Message Encryption

Implement and manage Microsoft Purview Data Loss Prevention

·       Prevent data loss with Microsoft Purview

·       Implement endpoint data loss prevention (DLP) with Microsoft Purview

·       Configure DLP policies for Microsoft Defender for Cloud Apps and Power Platform

·       Investigate and respond to Microsoft Purview Data Loss Prevention alerts

Implement and manage Microsoft Purview Insider Risk Management

·       Understand Microsoft Purview Insider Risk Management

·       Prepare for Microsoft Purview Insider Risk Management

·       Create and manage Insider Risk Management policies

·       Investigate insider risk alerts and related activity

·       Implement Adaptive Protection in Insider Risk Management

Secure AI interactions and environments with Microsoft Purview

·       Understand How to Secure AI Data with Microsoft Purview

·       Secure Microsoft 365 Copilot interactions with Microsoft Purview

·       Secure enterprise and browser-based AI apps with Microsoft Purview

·       Secure developer AI environments with Microsoft Purview

Implement and manage Microsoft 365 retention and recovery

·       Understand retention in Microsoft Purview

·       Implement and manage Microsoft 365 retention and recovery

Audit and search activity in Microsoft Purview

·       Search and investigate with Microsoft Purview Audit

·       Search for content with Microsoft Purview eDiscovery

Microsoft Certified: Information Security Administrator Associate

As an Information Security Administrator, you plan and implement information security of sensitive data by using Microsoft Purview and related services. You’re responsible for mitigating risks by protecting data inside collaboration environments that are managed by Microsoft 365 from internal and external threats and protecting data used by AI services. You also implement information protection, data loss prevention, retention, insider risk management, and manage information security alerts and activities.

You work with other roles that are responsible for governance, data, and security to evaluate and develop policies to address an organization’s information security and risk reduction goals. You collaborate with workload administrators, business application owners, and governance stakeholders to implement technology solutions that support the necessary policies and controls. This role also participates in responding to information security incidents.

You should be familiar with all Microsoft 365 services, PowerShell, Microsoft Entra, the Microsoft Defender portal, and Microsoft Defender for Cloud Apps.

.

Required Exam : SC-401

Before attending this course, students should have:

·         Foundational knowledge of Microsoft security and compliance technologies.

·         Basic knowledge of information protection concepts.

·         Understanding of cloud computing concepts.

·         Understanding of Microsoft 365 products and services.