SC-400: Implement Information Protection in Microsoft 365

Microsoft via Microsoft Learn

Go to class Write review

Discover the tools and concepts in Microsoft Purview for managing and protecting sensitive data. Understand how to keep data secure and compliant throughout its lifecycle across different environments.
Upon completion of this module, you should be able to:
- Understand the importance of data security and compliance.
- Discuss Microsoft's approach to protecting and managing sensitive data using Microsoft Purview.
- Define key concepts related to data protection, lifecycle management, and compliance.
- Identify Microsoft Purview tools and solutions that support data protection and governance strategies.
Learn about the information available to help you understand your data landscape and know your data.
Upon completion of this module, you should be able to:
- Explain the importance of data classification for protection and governance.
- Describe how sensitive information types (SITs) classify structured data.
- Explain how trainable classifiers identify unstructured data.
- Create a custom trainable classifier to detect organization-specific content.
Create and manage sensitive information types.
After completing this module, you'll be able to:
- Recognize the difference between built-in and custom sensitivity labels.
- Configure sensitive information types with exact data match-based classification.
- Implement document fingerprinting.
- Create custom keyword dictionaries.
Learn how Microsoft 365 encrypts data-at-rest and in-transit, securely manages encryption keys, and provides key management options to customers to meet their business needs and compliance obligations.
Upon completion of this module, you should be able to:
- Explain how encryption mitigates the risk of unauthorized data disclosure.
- Describe Microsoft data-at-rest and data-in-transit encryption solutions.
- Explain how Microsoft 365 implements service encryption to protect customer data at the application layer.
- Understand the differences between Microsoft managed keys and customer managed keys for use with service encryption.
Protect email with Microsoft Purview Message Encryption
After completing this module, you'll be able to:
- Enable Microsoft Purview Message Encryption using Azure Rights Management
- Apply encryption automatically using mail flow rules
- Customize branding for encrypted messages and the encryption portal
- Use Advanced Message Encryption to control message expiration and revocation
Microsoft Purview sensitivity labels enable you to classify and protect sensitive data throughout your organization, including in the cloud and on devices. This module covers how to classify and protect sensitive information to ensure its security and compliance.
Upon completion of this module, you should be able to:
- Understand the basics of Microsoft Purview sensitivity labels in Microsoft 365.
- Create and publish sensitivity labels to classify and safeguard data.
- Configure encryption settings with sensitivity labels for improved data security.
- Implement auto-labeling for consistent data classification and protection.
- Use the Microsoft Purview data classification dashboard to monitor sensitivity label usage.
Apply sensitivity labels for data protection.
After completing this module, you'll be able to:
- Understand the foundations of sensitivity label integration in Microsoft 365.
- Manage sensitivity label use in Office apps for security compliance.
- Secure Outlook and Teams meetings with sensitivity labels.
- Apply labels to Microsoft 365 Groups, SharePoint, and OneDrive for data protection.

Syllabus

Introduction to information security and compliance in Microsoft Purview
- Introduction
- Foundations of data security and compliance with Microsoft Purview
- Know your data
- Protect your data
- Prevent data loss
- Govern your data
- Module assessment
- Summary and resources
Classify data for protection and governance
- Introduction
- Data classification overview
- Classify data using sensitive information types
- Classify data using trainable classifiers
- Create a custom trainable classifier
- Module assessment
- Summary
Create and manage sensitive information types
- Introduction
- Sensitive information type overview
- Compare built-in versus custom sensitive information types
- Create and manage custom sensitive information types
- Create and manage exact data match sensitive info types
- Implement document fingerprinting
- Describe named entities
- Create a keyword dictionary
- Module assessment
- Summary and resources
Understand Microsoft 365 encryption
- Introduction to Microsoft 365 encryption
- Learn how Microsoft 365 data is encrypted at rest
- Understand service encryption in Microsoft Purview
- Explore customer key management using Customer Key
- Learn how data is encrypted in-transit
- Summary and knowledge check
Protect email with Microsoft Purview Message Encryption
- Introduction
- Understand message encryption
- Plan for Microsoft Purview Message Encryption
- Configure Microsoft Purview Message Encryption
- Customize encrypted email branding with Microsoft Purview
- Control encrypted email access with Advanced Message Encryption
- Use Microsoft Purview Message Encryption templates in mail flow rules
- Module assessment
- Summary and resources
Create and configure sensitivity labels with Microsoft Purview
- Introduction
- Sensitivity label overview
- Create and configure sensitivity labels and label policies
- Configure encryption with sensitivity labels
- Implement auto-labeling policies
- Track and evaluate sensitivity label usage in Microsoft Purview
- Module assessment
- Summary
Apply sensitivity labels for data protection
- Introduction
- Foundations of sensitivity label integration in Microsoft 365
- Manage sensitivity labels in Office apps
- Apply sensitivity labels with Microsoft 365 Copilot for secure collaboration
- Protect meetings with sensitivity labels
- Apply sensitivity labels to Microsoft Teams, Microsoft 365 groups, and SharePoint sites
- Module assessment
- Summary and resources