Microsoft Administering Information Security in Microsoft 365 (SC-401) Exam Questions

Microsoft Administering Information Security in Microsoft 365 Exam Objectives

1. 1

   1.0 Implement information protection (30 to 35%)

   • 1.1125rem,
   • 1.21
   • 1.32632px +
   • 1.4986842vw,
   • 1.55rem); font-weight: 600; line-height:
   • 1.63; margin-inline-start: -
   • 1.7875rem; padding-inline-start:
   • 1.8875rem;">Implement and manage data classification
   • 1.9Identify sensitive information requirements for an organization's data
   • 1.10Translate sensitive information requirements into built-in or custom sensitive info types
   • 1.11Create and manage custom sensitive info types
   • 1.12Implement document fingerprinting
   • 1.13Create and manage exact data match (EDM) classifiers
   • 1.14Create and manage trainable classifiers
   • 1.15Monitor data classification and label usage by using data explorer and content explorer
   • 1.16Configure optical character recognition (OCR) support for sensitive info types
   • 1.17125rem,
   • 1.181
   • 1.192632px +
   • 1.20986842vw,
   • 1.215rem); font-weight: 600; line-height:
   • 1.223; margin-inline-start: -
   • 1.23875rem; padding-inline-start:
   • 1.24875rem;">Implement and manage sensitivity labels in Microsoft Purview
   • 1.25Implement roles and permissions for administering sensitivity labels
   • 1.26Define and create sensitivity labels for items and containers
   • 1.27Configure protection settings and content marking for sensitivity labels
   • 1.28Configure and manage publishing policies for sensitivity labels
   • 1.29Configure and manage auto-labeling policies for sensitivity labels
   • 1.30Apply a sensitivity label to containers, such as Microsoft Teams, Microsoft 365 Groups, Microsoft Power BI, and Microsoft SharePoint
   • 1.31Apply sensitivity labels by using Microsoft Defender for Cloud Apps
   • 1.32125rem,
   • 1.331
   • 1.342632px +
   • 1.35986842vw,
   • 1.365rem); font-weight: 600; line-height:
   • 1.373; margin-inline-start: -
   • 1.38875rem; padding-inline-start:
   • 1.39875rem;">Implement information protection for Windows, file shares, and Exchange
   • 1.40Plan and implement the Microsoft Purview Information Protection client
   • 1.41Manage files by using the Microsoft Purview Information Protection client
   • 1.42Apply bulk classification to on-premises data by using the Microsoft Purview Information Protection scanner
   • 1.43Design and implement Microsoft Purview Message Encryption
   • 1.44Design and implement Microsoft Purview Advanced Message Encryption
2. 2

   2.0 Implement data loss prevention and retention (30 to 35%)

   • 2.1125rem,
   • 2.21
   • 2.32632px +
   • 2.4986842vw,
   • 2.55rem); font-weight: 600; line-height:
   • 2.63; margin-inline-start: -
   • 2.7875rem; padding-inline-start:
   • 2.8875rem;">Create and configure data loss prevention policies
   • 2.9Design data loss prevention policies based on an organization’s requirements
   • 2.10Implement roles and permissions for data loss prevention
   • 2.11Create and manage data loss prevention policies
   • 2.12Configure data loss prevention policies for Adaptive Protection
   • 2.13Interpret policy and rule precedence in data loss prevention
   • 2.14Create file policies in Microsoft Defender for Cloud Apps by using a DLP policy
   • 2.15125rem,
   • 2.161
   • 2.172632px +
   • 2.18986842vw,
   • 2.195rem); font-weight: 600; line-height:
   • 2.203; margin-inline-start: -
   • 2.21875rem; padding-inline-start:
   • 2.22875rem;">Implement and monitor Microsoft Purview Endpoint DLP
   • 2.23Specify device requirements for Endpoint DLP, including extensions
   • 2.24Configure advanced DLP rules for devices in DLP policies
   • 2.25Configure Endpoint DLP settings
   • 2.26Configure just-in-time protection
   • 2.27Monitor endpoint activities
   • 2.28125rem,
   • 2.291
   • 2.302632px +
   • 2.31986842vw,
   • 2.325rem); font-weight: 600; line-height:
   • 2.333; margin-inline-start: -
   • 2.34875rem; padding-inline-start:
   • 2.35875rem;">Implement and manage retention
   • 2.36Plan for information retention and disposition by using retention labels
   • 2.37Create, configure, and manage adaptive scopes
   • 2.38Create retention labels for data lifecycle management
   • 2.39Configure a retention label policy to publish labels
   • 2.40Configure a retention label policy to auto-apply labels
   • 2.41Interpret the results of policy precedence, including using Policy lookup
   • 2.42Create and configure retention policies
   • 2.43Recover retained content in Microsoft 365
3. 3

   3.0 Manage risks, alerts, and activities (30 to 35%)

   • 3.1125rem,
   • 3.21
   • 3.32632px +
   • 3.4986842vw,
   • 3.55rem); font-weight: 600; line-height:
   • 3.63; margin-inline-start: -
   • 3.7875rem; padding-inline-start:
   • 3.8875rem;">Implement and manage Microsoft Purview Insider Risk Management
   • 3.9Implement roles and permissions for Insider Risk Management
   • 3.10Plan and implement Insider Risk Management connectors
   • 3.11Plan and implement integration with Microsoft Defender for Endpoint
   • 3.12Configure and manage Insider Risk Management settings
   • 3.13Configure policy indicators
   • 3.14Select an appropriate policy template
   • 3.15Create and manage Insider Risk Management policies
   • 3.16Manage forensic evidence settings
   • 3.17Enable and configure insider risk levels for Adaptive Protection
   • 3.18Manage insider risk alerts and cases
   • 3.19Manage Insider Risk Management workflow, including notice templates
   • 3.20125rem,
   • 3.211
   • 3.222632px +
   • 3.23986842vw,
   • 3.245rem); font-weight: 600; line-height:
   • 3.253; margin-inline-start: -
   • 3.26875rem; padding-inline-start:
   • 3.27875rem;">Manage information security alerts and activities
   • 3.28Assign Microsoft Purview Audit (Premium) user licenses
   • 3.29Investigate activities by using Microsoft Purview Audit
   • 3.30Configure audit retention policies
   • 3.31Analyze Purview activities by using activity explorer
   • 3.32Respond to data loss prevention alerts in the Microsoft Purview portal
   • 3.33Investigate insider risk activities by using the Microsoft Purview portal
   • 3.34Respond to Purview alerts in Microsoft Defender XDR
   • 3.35Respond to Defender for Cloud Apps file policy alerts
   • 3.36Perform searches by using the Content search
   • 3.37125rem,
   • 3.381
   • 3.392632px +
   • 3.40986842vw,
   • 3.415rem); font-weight: 600; line-height:
   • 3.423; margin-inline-start: -
   • 3.43875rem; padding-inline-start:
   • 3.44875rem;">Protect data used by AI services
   • 3.45Implement controls in Microsoft Purview to protect content in an environment that uses AI services
   • 3.46Implement controls in Microsoft 365 productivity workloads to protect content in an environment that uses AI services
   • 3.47Implement pre-requisites for Data Security Posture Management (DSPM) for AI
   • 3.48Manage roles and permissions for DSPM for AI
   • 3.49Configure DSPM for AI policies
   • 3.50Monitor activities in DSPM for AI