SC-401: Information Security Administrator - EN

Last Updated 10 Sep 2026

Course Overview

As an Information Security Administrator, you plan and implement information security of sensitive data by using Microsoft Purview and related services. You’re responsible for mitigating risks by protecting data inside collaboration environments that are managed by Microsoft 365 from internal and external threats and protecting data used by AI services. You also implement information protection, data loss prevention, retention, insider risk management, and manage information security alerts and activities. You work with other roles that are responsible for governance, data, and security to evaluate and develop policies to address an organization’s information security and risk reduction goals. You collaborate with workload administrators, business application owners, and governance stakeholders to implement technology solutions that support the necessary policies and controls. This role also participates in responding to information security incidents. You should be familiar with all Microsoft 365 services, PowerShell, Microsoft Entra, the Microsoft Defender portal, and Microsoft Defender for Cloud Apps.

Duration - 10 Hours

Level - Intermediate

Style - Self paced

Course Type - Credential Ready

Certification - Yes

Hands on Labs - No

Solution Areas - Security, Establish a trusted and secure platform for AI (Frontier), AI ready productivity & security for every employee (Core), Run your business securely (Core)

Featured Product - Microsoft 365

Course Modules

Welcome to Cert Prep

In this introductory module, we will walk you through the key information you need to know before starting your certification prep course. You'll gain a clear understanding of the steps, expectations, and benefits

Implement Information Protection

In this session, you will learn to classify, label, and protect sensitive data using Microsoft Purview. They’ll also explore message encryption, sensitivity labels, and advanced techniques like custom info types and exact data match classifiers.

Implement and manage data loss prevention

In this module, you will learn how to plan, create, and manage Data Loss Prevention (DLP) policies using Microsoft Purview. They’ll also explore endpoint DLP, configure advanced rules, and investigate alerts to protect sensitive data across devices and cloud environments.

Implementing and Managing Microsoft Purview: Insider Risk, Data Protection in AI Environments, an...

In this module, you will learn how to implement and manage Microsoft Purview Insider Risk Management. They’ll explore insider risk policies, workflows, and alerts, along with Adaptive Protection features. The session also covers protecting data in AI environments and managing data retention and recovery using Microsoft Purview.

Retention, Recovery, and Audit Management in Microsoft Purview

In this module, you will learn to manage data retention, recovery, and auditing using Microsoft Purview. They will explore retention labels, eDiscovery, and content search to support compliance, legal, and data lifecycle needs across Microsoft 365.

Getting Ready for the Certification: SC-401 Information Security Administrator

In this exam preparation module, learn effective preparation strategies for the certification exam, including sample questions and study tips.

Practice Lab

This Practice Lab module gives you hands-on lab exercises to reinforce your learning. Please note that lab seats are limited and assigned on a first-come, first-served basis, so access may not be available to all learners enrolled in this course.

Practice Test

Take this assessment to validate your skills gathered from the self-paced online learning course completed in this course to mark your completion.

Live Support, Next Steps and Feedback

If you have further questions or need support, don’t forget to join our scheduled Office Hours for expert guidance.

Other courses in this Category

Intermediate

AZ-500: Azure Security Engineer - EN

Duration - 10 Hours
Course
Intermediate

SC-300: Identity and Access Administrator - EN

Duration - 10 Hours
Course
Advanced

SC-100: Cybersecurity Architect Expert - EN

Duration - 10 Hours
Course
Intermediate

SC-200: Security Operations Analyst - EN

Duration - 10 Hours
Course