Microsoft 365 : Information Protection and Compliance Administration (SC-400)

Implementing Data Loss Prevention in Microsoft 365

• Prevent data loss in Microsoft 365
• Implement endpoint data loss prevention
• Configure DLP policies for Microsoft Cloud App Security and Power Platform
• Manage DLP policies and reports in Microsoft 365

Implementing Information Governance in Microsoft 365

• Govern information in Microsoft 365
• Manage data retention in Microsoft 365 workloads
• Manage records in Microsoft 365

Monitoring and Investigating Data and Activities Using Microsoft Purview

Explore compliance in Microsoft 365

• Help organizations manage risks, protect data, and stay compliant with regulations and standards using Microsoft 365
• Plan your initial compliance tasks in Microsoft Purview
• Manage compliance requirements with Compliance Manager
• Manage compliance posture and improvement actions using the Compliance Manager dashboard
• Explain how an organization’s compliance score is determined

Search content in the Microsoft Purview compliance portal

• Use content search in the Microsoft Purview compliance portal
• Design and create a content search
• Preview search results
• View search statistics
• Export search results and report
• Configure search permission filtering

Manage Microsoft Purview eDiscovery (Standard)

• Build on the basic search and export functionality of Microsoft Purview eDiscovery (Standard)
• Describe the basic eDiscovery (Standard) workflow
• Create an eDiscovery case
• Create an eDiscovery hold for a case
• Search content in a case and then export that content
• Close, reopen, and delete a case

Manage Microsoft Purview eDiscovery (Premium)

• Describe how Microsoft Purview eDiscovery (Premium) builds on eDiscovery (Standard)
• Describe the basic eDiscovery (Premium) workflow
• Create and manage cases in eDiscovery (Premium)
• Manage custodian and non-custodian data sources
• Analyze case content and use analytical tools to reduce the size of search result sets

Manage Microsoft Purview Audit (Standard)

• Describe the differences between Audit (Standard) and Audit (Premium)
• Identify key features of the Audit (Standard) solution
• Configure and implement audit log search using Audit (Standard)
• Export, configure, and view audit log records
• Use audit log search to troubleshoot common support issues

Manage Microsoft Purview Audit (Premium)

• Describe the differences between Audit (Standard) and Audit (Premium)
• Configure and implement Microsoft Purview Audit (Premium)
• Create audit log retention policies
• Conduct investigations regarding compromised user accounts

Managing Insider and Privacy Risks in Microsoft 365

Prepare for Microsoft Purview Communication Compliance

• List the enhancements of communication compliance over the Office 365 supervision policies it will replace
• Identify and remediate code of conduct policy violations
• List prerequisites before creating communication compliance policies
• Describe the types of built-in and pre-defined policy templates

Manage Insider Risk in Microsoft Purview

• Prevent, detect, and contain internal risks in an organization with Microsoft Purview Insider Risk Management
• Describe the types of built-in and pre-defined policy templates
• List prerequisites before creating insider risk policies
• Explain actions to take in an insider risk management case

Implement Microsoft Purview Information Barriers

• Describe how information barriers and the components can restrict or allow communication and collaboration between specific user groups
• Enable information barriers
• Discover how information barriers help organizations determine users to add or remove from a Microsoft Team, OneDrive account, and SharePoint site
• Prevent users or groups from communicating and collaborating in Microsoft Teams, OneDrive, and SharePoint using information barriers

Manage regulatory and privacy requirements with Microsoft Priva

• Create and manage risk management policies for data overexposure, data transfer, and data minimization
• Review and remediate risk alerts
• Send notifications to users
• Create and manage subject rights requests
• Estimate and retrieve subject data
• Review subject data
• Create subject rights reports.