Vault™ > SC-401T00: Information Security Administrator

Unlock This Course & The Entire Vault™ Library

Have questions about our subscriptions? Call 1-800-264-9029 or email an account manager.

Login Buy Subscription

SC-401T00: Information Security Administrator

By Garrett Jennings
4 Days
Live Class Recording
March 9, 2026
Course Description

The Information Security Administrator course equips you with the skills needed to plan and implement information security for sensitive data using Microsoft Purview and related services. The course covers essential topics such as information protection, data loss prevention (DLP), retention, and insider risk management. You learn how to protect data within Microsoft 365 collaboration environments from internal and external threats. Additionally, you learn how to manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. You also learn how to protect data used by AI services within Microsoft environments and implement controls to safeguard content in these environments.

What you will learn

With a focus on practical applications, the course covers:

  • You will work extensively with Microsoft Purview and its connected Microsoft 365 security and compliance services
  • Learn to classify, protect, govern, monitor, and investigate sensitive data across Microsoft 365 and AI‑powered environments
  • Learn to classify, protect, govern, monitor, and investigate sensitive data across Microsoft 365 and AI‑powered environments

What products and services will you use and learn about in this course 

  • Microsoft Purview Information Protection
  • Purview Data Classification
  • Purview Insider Risk Management
  • Purview Records Management
  • Microsoft 365 Audit
  • Microsoft 365 Defender
  • AI Data Protection Controls

Prepare for the Microsoft Certified: Information Security Administrator Associate Certification   

This course is designed to help students confidently prepare for the SC-401: Microsoft Certified: Information Security Administrator Associate exam. The study areas for the certification exam related to this course are based on the Job Task Analysis (JTA) that was conducted in February 2023.

Note: To pass the certification test, studying outside the course may be required to ensure all the concepts are fully understood.

Course Outline

Learning Path: Implement Microsoft Purview Information Protection

Organizations need effective information protection to prevent data exposure, ensure compliance, and maintain security across cloud and on-premises environments. Microsoft Purview enables classification, labeling, and encryption to safeguard sensitive data across Microsoft 365 services, Exchange, and on-premises storage.

Modules

  • Protect sensitive data in a digital world
  • Classify data for protection and governance
  • Review and analyze data classification and protection
  • Create and manage sensitive information types
  • Create and manage sensitivity labels with Microsoft Purview
  • Apply and manage sensitivity labels
  • Understand Microsoft 365 encryption
  • Protect email with Microsoft Purview message encryption

Lab

  • Implement Information Protection

 

Learning Path: Implement and manage data loss prevention

Organizations must prevent data loss and protect sensitive information across cloud and endpoint environments. Microsoft Purview provides data loss prevention (DLP) policies to detect, restrict, and respond to risky activities involving sensitive data. Learn how to plan and configure DLP policies, track policy effectiveness, and analyze data security risks to improve your organization's protection strategy.

Modules

  • Plan and design data loss prevention policies
  • Create and manage DLP policies
  • Implement Endpoint data loss prevention
  • Investigate Microsoft Purview DLP alerts

Lab

  • Implement and manage data loss prevention

 

Learning Path: Implement and manage retention and recovery in Microsoft Purview

Learn how Microsoft Purview supports data lifecycle management through retention policies and labels. Understand how to configure and apply retention settings that meet organizational requirements for preserving or deleting content across Microsoft 365 services.

Modules

  • Understand retention in Microsoft Purview
  • Implement and manage retention and recovery in Microsoft Purview

Lab

  • Implement and manage retention and recovery in Microsoft Purview

 

Learning Path: Implement and manage Microsoft Purview Insider Risk Management

Implement Microsoft Purview Insider Risk Management to detect, investigate, and respond to internal risks while protecting data, ensuring compliance, and maintaining employee trust.

Modules

  • Plan and prepare for Insider Risk Management
  • Prepare for insider risk management
  • Create and manage insider risk policies
  • Manage the insider risk management workflow
  • Investigate insider risk management activities
  • Implement Adaptive Protection in Insider Risk Management

Lab

  • Implement and manage Microsoft Purview Insider Risk Management

 

Learning Path: Audit and search activity in Microsoft Purview

Understand how to use Microsoft Purview to log activity and search for content across Microsoft 365 services. Learn how audit logging supports investigations and compliance requirements, and how content search can help locate specific emails, documents, and other items when needed.

Modules

  • Search and investigate with Microsoft Purview Audit
  • Support investigations with Microsoft Purview Content search

Lab

  • Audit and search activity in Microsoft Purview

 

Learning Path: Secure AI interactions and environments with Microsoft Purview

AI tools like Microsoft Copilot are changing the way people work, but they also increase the risk of oversharing and accidental data exposure. Microsoft Purview helps organizations apply the right controls to keep sensitive data protected across AI-enabled environments.

Modules

  • Understand Microsoft Purview protections for AI
  • Use DSPM for AI to understand AI usage and identify exposure risks
  • Discover AI interactions with Microsoft Purview
  • Assess and mitigate AI risks with Microsoft Purview

Lab

  • Protect data in AI environments with Microsoft Purview

 

Learning Path: Validate sensitivity, DLP, and retention policies

Verify that the policies you configured, sensitivity labels, DLP, and retention, are working as expected in Microsoft 365 apps. This exercise helps confirm that content is:

Modules

  • None

Lab

  • Validate sensitivity, DLP, and retention policies
Course Content
Introduction
Introduction
Learning Path: Implement Microsoft Purview Information Protection
Protect sensitive data in a digital world
Information Protection Framework - Know your data
Classify data for protection and governance
Classify data for protection and governance(Continuation after lab)
Review and analyze data classification and protection
Create and manage sensitive information types
Create and manage sensitivity labels with Microsoft Purview
Apply and manage sensitivity labelsfor data protection
Review
Day 1 review
Learning Path: Implement Microsoft Purview Information Protection
Classify and protect on-premises data
Understand Microsoft 365 encryption
Protect email with Microsoft Purview message encryption
Learning Path: Implement and manage data loss prevention
Plan and design data loss prevention policies
Create and manage DLP policies
Implement Endpoint data loss prevention
Investigate Microsoft Purview DLP alerts
Investigate Microsoft Purview DLP alerts(Continuation after lab / lunch)
Learning Path: Implement and manage retention and recovery in Microsoft Purview
Understand retention in Microsoft Purview
Implement and manage retention and recovery in Microsoft Purview
Review
Day 2 review
Learning Path: Implement and manage Microsoft Purview Insider Risk Management
Plan and prepare for Insider Risk Management
Prepare for insider risk management
Create and manage insider risk policies
Manage the insider risk management workflow
Investigate insider risk management activities
Implement Adaptive Protection in Insider Risk Management
Learning Path: Audit and search activity in Microsoft Purview
Introduction to search and investigate with Microsoft Purview Audit
Search and investigate with Microsoft Purview Audit
Support investigations with Microsoft Purview Content search
Review
Day 3 review
Learning Path: Protect data in AI environments with Microsoft Purview
Understand Microsoft Purview protections for AI
Use DSPM for AI to understand AI usage and identify exposure risks
Secure Microsoft 365 Copilot interactions with Microsoft Purview
Secure enterprise and browser-based AI apps with Microsoft Purview
Govern AI prompts and responses
Secure developer AI environments with Microsoft Purview