SC-401T00: Protect sensitive information with Microsoft Purview in the AI era

Module 1: Protect sensitive data in a digital world

• Introduction
• The growing need for data protection
• The challenges of managing sensitive data
• Protect data in a Zero Trust world
• Understand data classification and protection
• Prevent data leaks and insider threats
• Manage security alerts and respond to threats
• Protect AI-generated and AI-processed data
• Module assessment
• Summary

Module 2: Classify data for protection and governance

• Introduction
• Data classification overview
• Classify data using sensitive information types
• Classify data using trainable classifiers
• Create a custom trainable classifier
• Module assessment
• Summary

Module 3: Review and analyze data classification and protection

• Introduction
• Review classification and protection insights
• Analyze classified data with data and content explorer
• Monitor and review actions on labeled data
• Module assessment
• Summary

Module 4: Create and manage sensitive information types

• Introduction
• Sensitive information type overview
• Compare built-in versus custom sensitive information types
• Create and manage custom sensitive information types
• Create and manage exact data match sensitive info types
• Implement document fingerprinting
• Describe named entities
• Create a keyword dictionary
• Module assessment
• Summary and resources

Module 5: Create and configure sensitivity labels with Microsoft Purview

• Introduction
• Sensitivity label overview
• Create and configure sensitivity labels and label policies
• Configure encryption with sensitivity labels
• Implement auto-labeling policies
• Track and evaluate sensitivity label usage in Microsoft Purview
• Module assessment
• Summary

Module 6: Apply sensitivity labels for data protection

• Introduction
• Foundations of sensitivity label integration in Microsoft 365
• Manage sensitivity labels in Office apps
• Apply sensitivity labels with Microsoft 365 Copilot for secure collaboration
• Protect meetings with sensitivity labels
• Apply sensitivity labels to Microsoft Teams, Microsoft 365 groups, and SharePoint sites
• Module assessment
• Summary and resources

Module 7: Classify and protect on-premises data with Microsoft Purview

• Introduction
• Protect on-premises files with Microsoft Purview
• Prepare your environment for the Microsoft Purview Information Protection scanner
• Configure and install the Microsoft Purview Information Protection scanner
• Run and manage the scanner
• Enforce data loss prevention policies on on-premises files
• Module assessment
• Summary

Module 8: Understand Microsoft 365 encryption

Module 9: Protect email with Microsoft Purview Message Encryption

• Introduction
• Understand message encryption
• Plan for Microsoft Purview Message Encryption
• Configure Microsoft Purview Message Encryption
• Customize encrypted email branding with Microsoft Purview
• Control encrypted email access with Advanced Message Encryption
• Use Microsoft Purview Message Encryption templates in mail flow rules
• Module assessment
• Summary and resources

Module 10: Prevent data loss with Microsoft Purview

• Introduction
• Data loss prevention overview
• Plan and design DLP policies
• Understand DLP policy deployment and simulation mode
• Create and manage DLP policies
• Integrate Adaptive Protection with DLP
• Use DLP analytics (preview) to identify data risks
• Understand DLP alerts and activity tracking
• Module assessment
• Summary and resources

Module 11: Implement endpoint data loss prevention (DLP) with Microsoft Purview

• Introduction
• Endpoint data loss prevention (DLP) overview
• Understand the endpoint DLP implementation workflow
• Onboard devices for endpoint DLP
• Configure settings for endpoint DLP
• Create and manage endpoint DLP policies
• Deploy the Microsoft Purview browser extension
• Configure just-in-time (JIT) protection
• Module assessment
• Summary and resources

Module 12: Configure DLP policies for Microsoft Defender for Cloud Apps and Power Platform

• Introduction
• Configure data loss prevention policies for Power Platform
• Integrate data loss prevention in Microsoft Defender for Cloud Apps
• Configure policies in Microsoft Defender for Cloud Apps
• Manage data loss prevention violations in Microsoft Defender for Cloud Apps
• Module assessment
• Summary and resources

Module 13: Investigate and respond to Microsoft Purview Data Loss Prevention alerts

• Introduction
• Understand data loss prevention (DLP) alerts
• Understand the DLP alert lifecycle
• Configure DLP policies to generate alerts
• Investigate DLP alerts in Microsoft Purview
• Investigate DLP alerts in Microsoft Defender XDR
• Respond to DLP alerts
• Exercise – Investigate a DLP alert and related incident
• Module assessment
• Summary

Module 14: Understand Microsoft Purview Insider Risk Management

• Introduction
• What is an insider risk?
• Microsoft Purview Insider Risk Management overview
• Microsoft Purview Insider Risk Management features
• Case study: Protect sensitive data with Insider Risk Management
• Module assessment
• Summary

Module 15: Prepare for Microsoft Purview Insider Risk Management

• Introduction
• Plan for Insider Risk Management
• Prepare your organization for Insider Risk Management
• Configure settings for Insider Risk Management
• Integrate Insider Risk Management with data sources and tools
• Module assessment
• Summary

Module 16: Create and manage Insider Risk Management policies

• Introduction
• Understand Insider Risk Management policy templates
• Compare quick and custom insider risk policies
• Create a custom Insider Risk Management policy
• Manage policies in Insider Risk Management
• Module assessment
• Summary

Module 17: Investigate insider risk alerts and related activity

• Introduction
• Understand insider risk alerts and investigations
• Manage alert volume in insider risk management
• Investigate and triage insider risk alerts in Microsoft Purview
• Analyze alert context with the All risk factors tab
• Investigate activity details with the Activity explorer tab
• Review patterns over time with the User activity tab
• Investigate insider risk alerts in Microsoft Defender XDR
• Manage and take action on insider risk cases
• Exercise – Investigate potential data theft using Insider Risk Management
• Module assessment
• Summary

Module 18: Implement Adaptive Protection in Insider Risk Management

• Introduction
• Adaptive Protection overview
• Understand and configure risk levels in Adaptive Protection
• Configure Adaptive Protection
• Manage Adaptive Protection
• Summary and knowledge check

Module 19: Understand How to Secure AI Data with Microsoft Purview

• Introduction
• Understand AI data security risks
• Understand how Microsoft Purview secures AI data
• Evaluate compliance risks for AI usage
• Identify AI-related data exposure risks
• Understand how Microsoft Purview controls AI data access
• Detect and respond to risky AI activity
• Retain and search Copilot prompts and responses
• Module assessment
• Summary

Module 20: Secure Microsoft 365 Copilot interactions with Microsoft Purview

• Introduction
• Understand how Microsoft 365 Copilot changes data protection needs
• Assess Copilot regulatory compliance with Compliance Manager
• Audit Copilot interactions with Microsoft Purview
• Analyze Copilot interactions with Communication Compliance
• Classify and protect Copilot content with sensitivity labels
• Apply DLP policies to Microsoft 365 Copilot
• Apply retention policies to Copilot prompts and responses
• Investigate and delete Copilot activity with eDiscovery
• Module assessment
• Summary

Module 21: Secure enterprise and browser-based AI apps with Microsoft Purview

• Introduction
• Understand risks from enterprise and non-Microsoft AI tools
• Assess AI usage for security and compliance
• Identify policy violations with Communication Compliance
• Detect risky AI usage with Insider Risk Management
• Protect sensitive data in AI apps with Microsoft Purview DLP
• Case study: Use Adaptive Protection to respond to AI-related risk
• Apply retention policies to AI app prompts and responses
• Module assessment
• Summary

Module 22: Secure developer AI environments with Microsoft Purview

• Introduction
• Understand risks and responsibilities in AI development environments
• Discover and assess AI apps with DSPM for AI
• Classify, restrict, and retain AI prompt data
• Enforce protections in Azure AI services and Azure AI Foundry
• Apply controls for Microsoft Entra-registered custom AI apps
• Secure AI agents built in Copilot Studio
• Manage data risks in Copilot in Fabric
• Investigate and respond to risky AI activity
• Module assessment
• Summary

Module 23: Understand retention in Microsoft Purview

• Introduction
• Overview of retention and the data lifecycle
• Understand retention labels and retention policies
• Decide when to apply retention
• Module assessment
• Summary

Module 24: Implement and manage Microsoft 365 retention and recovery

• Introduction
• Plan for retention and disposition with retention labels
• Create and publish retention labels
• Create and manage auto-apply retention labels
• Create and configure adaptive scopes
• Create and configure retention policies
• Understand policy and label precedence in Microsoft Purview
• Recover content in Microsoft 365 workloads
• Module assessment
• Summary

Module 25: Search and investigate with Microsoft Purview Audit

• Introduction
• Microsoft Purview Audit overview
• Configure and manage Microsoft Purview Audit
• Conduct searches with Audit (Standard)
• Audit Microsoft Copilot for Microsoft 365 interactions
• Investigate activities with Audit (Premium)
• Export audit log data
• Configure audit retention with Audit (Premium)
• Module assessment

Module 26: Search for content with Microsoft Purview eDiscovery

• Introduction
• Understand eDiscovery and content search capabilities
• Prerequisites for using eDiscovery in Microsoft Purview
• Create an eDiscovery search
• Conduct an eDiscovery search
• Export eDiscovery search results
• Module assessment
• Summary and resources