MS-4002: Prepare security and compliance to support Microsoft 365 Copilot

Module 1: Implement Microsoft 365 Copilot

• Examine the key tasks administrators must complete when implementing Microsoft 365 Copilot.
• Complete prerequisites, prepare data for searches, assign Copilot licenses, and extend Copilot capabilities.

Learning Objectives

• Identify the prerequisites for Microsoft 365 Copilot.
• Implement SharePoint Advanced Management to prepare for Microsoft 365 Copilot.
• Prepare your data for Microsoft 365 Copilot searches.
• Assign Microsoft 365 Copilot licenses.
• Identify Microsoft 365 security features that control oversharing of data in Microsoft 365 Copilot.
• Explain how Copilot agents extend Microsoft 365 Copilot.
• Drive adoption by creating a Copilot Center of Excellence.

Prerequisites

• Basic functional experience with Microsoft 365 services.
• Proficient understanding of general IT practices.

Module 2: Manage Secure User Access in Microsoft 365

• Examine the features available in Microsoft 365 for securing user access, including Conditional Access, multifactor authentication, self-service password management, Smart Lockout, and security defaults.

Learning Objectives

• Manage user passwords.
• Create Conditional Access policies.
• Enable security defaults.
• Describe pass-through authentication.
• Enable multifactor authentication.
• Describe self-service password management.
• Implement Microsoft Entra Smart Lockout.

Prerequisites

• None.

Module 3: Manage Permissions, Roles, and Role Groups in Microsoft 365

• Examine the use of roles and role groups in the Microsoft 365 permission model.
• Explore role management, delegation, administrative best practices, and privilege elevation.

Learning Objectives

• Understand how roles are used in the Microsoft 365 ecosystem.
• Describe the Azure role-based access control permission model used in Microsoft 365.
• Identify key tasks assigned to common Microsoft 365 admin roles.
• Identify best practices when configuring admin roles.
• Delegate admin roles to partners.
• Implement role groups in Microsoft 365.
• Manage permissions using administrative units in Microsoft Entra ID.
• Manage permissions in SharePoint to prevent oversharing of data.
• Elevate privileges using Microsoft Entra ID Privileged Identity Management.

Prerequisites

• None.

Module 4: Deploy Microsoft 365 Apps for Enterprise

• Examine how to implement Microsoft 365 Apps for enterprise through user-driven and centralized deployment methods.

Learning Objectives

• Describe Microsoft 365 Apps for enterprise functionality.
• Plan a deployment strategy for Microsoft 365 Apps for enterprise.
• Complete a user-driven installation of Microsoft 365 Apps for enterprise.
• Deploy Microsoft 365 Apps for enterprise with Microsoft Endpoint Configuration Manager.
• Identify mechanisms for managing centralized deployments.
• Deploy Microsoft 365 Apps for enterprise using the Office Deployment Toolkit.
• Describe how to manage Microsoft 365 Apps for enterprise updates.
• Determine the appropriate update channel and deployment method for your organization.
• Add Microsoft 365 Apps for enterprise to Microsoft Intune.
• Deploy Microsoft 365 Apps for enterprise security baselines.

Prerequisites

• None.

Module 5: Implement Microsoft Purview Data Loss Prevention

• Examine how Microsoft Purview Data Loss Prevention helps organizations protect sensitive information and enforce data protection policies.

Learning Objectives

• Create a Data Loss Prevention implementation plan.
• Implement Microsoft 365 default DLP policies.
• Create custom DLP policies using templates and custom configurations.
• Create email notifications and policy tips for users when DLP rules are triggered.
• Configure policy tips for DLP policies.
• Configure email notifications for DLP policies.

Prerequisites

• None.

Module 6: Implement Sensitivity Labels

• Examine the process of implementing sensitivity labels, including planning, configuration, publishing, and lifecycle management.

Learning Objectives

• Create a deployment strategy for implementing sensitivity labels.
• Enable sensitivity labels in SharePoint Online and OneDrive.
• Create and configure sensitivity labels.
• Publish sensitivity labels through label policies.
• Identify the differences between removing and deleting sensitivity labels.

Prerequisites

• None.

Module 7: Manage Microsoft 365 Copilot Extensibility

• Examine the administrative tasks required to manage Microsoft 365 Copilot extensibility, including Copilot agents and Microsoft Graph connectors.

Learning Objectives

• Manage Copilot agents in integrated apps.
• Create a connection between a data source and a Microsoft Graph connector.
• Monitor Microsoft Graph connectors across the organization.
• Manage how Microsoft Graph connector content is displayed in Microsoft Copilot.

Prerequisites

• None.