SC-400 : Microsoft Information Protection Administrator

AUDIENCE

The information protection administrator translates an organization’s risk and compliance requirements into technical implementation. They are responsible for implementing and managing solutions for content classification, data loss prevention (DLP), information protection, data lifecycle management, records management, privacy, risk, and compliance. They also work with other roles that are responsible for governance, data, and security to evaluate and develop policies to address an organization's risk reduction and compliance goals. This role assists workload administrators, business application owners, human resources departments, and legal stakeholders to implement technology solutions that support the necessary policies and controls.

Job role: Administrator

Preparation for exam: SC-400

PREREQUISITES

Before attending this course, students should have:

• Foundational knowledge of Microsoft security and compliance technologies.
• Basic knowledge of information protection concepts.
• Understanding of cloud computing concepts.
• Understanding of Microsoft 365 products and services.

After completing this course, you will be able to:

• Explain and use sensitivity labels.
• Configure Data Loss Prevention policies.
• Secure messages in Office 365.
• Describe the information governance configuration process.
• Define key terms associated with Microsoft’s information protection and governance solutions.
• Explain the Content explorer and Activity explorer.
• Describe how to use sensitive information types and trainable classifiers.
• Review and analyze DLP reports.
• Identify and mitigate DLP policy violations.
• Describe the integration of DLP with Microsoft Cloud App Security (MCAS).
• Deploy Endpoint DLP
• Describe records management
• Configure event driven retention
• Import a file plan
• Configure retention policies and labels
• Create custom keyword dictionaries
• Implement document fingerprinting

Module 1: Implement Information Protection in Microsoft 365

Organizations require information protection solutions to protect their data against theft and accidental loss. Learn how to protect your sensitive information. Learn how Microsoft 365 information protection and governance solutions help you protect and govern your data, throughout its lifecycle – wherever it lives, or wherever it travels. Learn about the information available to help you understand your data landscape and know your data. Learn how to use sensitive information types to support your information protection strategy. Learn about how sensitivity labels are used to classify and protect business data while making sure that user productivity and their ability to collaborate are not hindered.

Lessons

• Introduction to information protection and governance in Microsoft 365
• Classify data for protection and governance
• Create and manage sensitive information types
• Describe Microsoft 365 encryption
• Deploy message encryption in Office 365
• Configure sensitivity labels
• Apply and manage sensitivity labels

Lab: Implement Information Protection

• Assign permissions for compliance
• Manage Office 365 message encryption
• Manage Sensitive Information Types
• Manage Trainable Classifiers
• Manage Sensitivity Labels

After completing this module, students will be able to:

• Describe Microsoft’s approach to information protection and governance.
• List the components of the Data Classification solution.
• Describe how to use sensitive information types and trainable classifiers.
• Implement document fingerprinting
• Create custom keyword dictionaries
• Deploy message encryption in Office 365

Module 2: Implement Data Loss Prevention in Microsoft 365

In this module we discuss how to implement data loss prevention techniques to secure your Microsoft 365 data. Learn how to discover, classify, and protect sensitive and business-critical content throughout its lifecycle across your organization. Learn how to configure and implement data loss prevention policies and integrate them with Microsoft Cloud App Security. Learn how to respond to and mitigate data loss policy violations.

Lessons

• Prevent Data loss in Microsoft 365
• Implement Endpoint data loss prevention
• Configure DLP policies for Microsoft Cloud App Security and Power Platform
• Manage DLP policies and reports in Microsoft 365

Lab: Implement Data Loss Prevention

• Manage DLP policies
• Manage Endpoint DLP
• Test DLP policies
• Manage DLP reports

After completing this module, students will be able to:

• Describe the information protection configuration process.
• Articulate deployment and adoption best practices.
• Describe the integration of DLP with Microsoft Cloud App Security (MCAS).
• Configure policies in Microsoft Cloud App Security.
• Review and analyze DLP reports.
• Identify and mitigate DLP policy violations.
• Mitigate DLP violations in MCAS.

Module 3: Implement Information Governance in Microsoft 365

In this module you will learn how to plan and implement information governance strategies for an organization. Learn how to manage your content lifecycle using solutions to import, store, and classify business-critical data so you can keep what you need and delete what you don't. Learn how to manage retention for Microsoft 365, and how retention solutions are implemented in the individual Microsoft 365 services. Learn how to use intelligent classification to automate and simplify the retention schedule for regulatory, legal, and business-critical records in your organization.

Lessons

• Govern information in Microsoft 365
• Manage data retention in Microsoft 365 workloads
• Manage records in Microsoft 365

Lab: Implement Information Governance

• Configure Retention Labels
• Implement Retention Labels
• Configure Service-based Retention
• Use eDiscovery for Recovery
• Configure Records Management

After completing this module, students will be able to:

• Describe the information governance configuration process.
• Articulate deployment and adoption best practices.
• Describe the retention features in Microsoft 365 workloads.
• Configure retention settings in Microsoft Teams and SharePoint Online.
• Implement retention for Exchange Mailbox items.
• Recover content protected by retention settings.
• Regain protected items from Exchange Mailboxes.
• Describe the records management configuration process.