Description
Prepare for exam SC-401 by learning to protect sensitive data in Microsoft 365 with Purview labels, data loss prevention, retention, and insider risk tools.
About this course
This course prepares you for exam SC-401, which replaced SC-400 in 2025 for this certification. You work through the three equally weighted skill areas: information protection, data loss prevention and retention, and managing risks, alerts, and activities. Each module includes a lab in a Microsoft 365 trial tenant, including protecting data used by AI services.
Who it is for
This course is for Microsoft 365 administrators, information security administrators, and compliance staff who plan and implement data protection with Microsoft Purview alongside governance, data, and security teams.
Prerequisites
Working familiarity with Microsoft 365 services such as Exchange Online, SharePoint, OneDrive, and Teams
Basic experience with Microsoft Entra and PowerShell
Awareness of the Microsoft Defender portal and Defender for Cloud Apps is helpful
Requirements
A modern web browser for the Microsoft Purview and Defender portals
A time-limited Microsoft 365 E5 trial tenant, or paid Microsoft 365 E5 or Purview premium licensing, for hands-on labs
Windows PowerShell or PowerShell 7 for a few administration tasks
Exam
Exam SC-401: Administering Information Security in Microsoft 365 (Microsoft Certified: Information Security Administrator Associate) (SC-401). This course prepares you for exam SC-401, and one exam attempt voucher is included. Many objectives depend on Microsoft 365 E5 or Purview premium features, so most learners need additional self-study and hands-on practice in a trial tenant beyond the course hours, plus the free Microsoft practice assessment. Passing is not guaranteed. Microsoft is making a minor update to the sensitivity label objectives in October 2026.
What you will be able to do
- You will be able to create sensitive information types and classifiers to find sensitive data across Microsoft 365.
- You will be able to publish sensitivity labels with auto-labeling and message encryption.
- You will be able to build data loss prevention policies, including Endpoint DLP, and tune them from alerts.
- You will be able to configure retention labels and policies and recover retained content.
- You will be able to set up Insider Risk Management and investigate activity with audit and eDiscovery.
Syllabus
Purview orientation and data classification 3.5 hours
Microsoft Purview portal, Sensitive information types, Trainable classifiers, Data explorer and content explorer.
Sensitivity labels, auto-labeling, and message encryption 3.5 hours
Sensitivity label design, Label policies, Auto-labeling, Microsoft Purview Message Encryption.
Data loss prevention policies and Endpoint DLP 4 hours
DLP policy design, Policy tips and overrides, Endpoint DLP, DLP alerts.
Retention labels, retention policies, and recovery 3 hours
Retention policies, Retention labels, Adaptive scopes, Content recovery.
Insider Risk Management and Adaptive Protection 4 hours
Insider Risk Management policies, Risk indicators, Adaptive Protection, Case review.
Alerts, audit, eDiscovery, DSPM for AI, and exam readiness 4 hours
Alert management, Audit search, eDiscovery cases, Data Security Posture Management for AI, SC-401 practice assessment review.
Coaching sessions 2 hours
One-on-one or small-group coaching, scheduled with your coach.
How it is delivered
How you learn
On-demand asynchronous training with online support, plus 2 hours of coaching.
Live or in person
Live online or in-person sessions are available for an additional fee. Email admissions@wecancodeit.org for details.
TechCred
Eligible credential
Microsoft Certified: Information Security Administrator Associate
Reimbursement applies only to the credential approved in your TechCred application, so use the exact credential name shown on this page.
Funding
Ohio's TechCred program may reimburse eligible Ohio employers up to $1,000 per person, per credential, and up to $30,000 per application, for eligible costs such as tuition and certification costs.
TechCred's maximum is $1,000 per person, per credential, toward this price.
Timeline
The current application period opens at 9:00 a.m. on October 1, 2026 and closes at 3:00 p.m. on October 30, 2026.
Training must start no earlier than the first day of the application period and be completed within 12 months of the award date.
What we provide
For each learner, We Can Code IT provides an itemized per-person invoice that shows the exact credential name, and a certificate that shows the learner's name, the credential and the date earned (or the vendor's exam record for certifications). We can also send a written quote to include with your TechCred application.
Pricing is the same for all customers, whether or not you use TechCred.
We Can Code IT is an independent training provider. Being listed as an eligible TechCred provider is not an endorsement by the State of Ohio and does not guarantee funding. The Ohio Department of Development makes all TechCred decisions, so check the state's current program guidelines before you apply. Program details: the State of Ohio’s TechCred page.
Enroll your team
One or a few learners
Choose the number of seats, add the course to your cart and check out.
A group, or a written quote
Send the form below for group enrollment or a written quote to include with your TechCred application. We reply within one business day. You can also email admissions@wecancodeit.org.
We Can Code IT, LLC, 26300 Cedar Rd, Suite 1105, Beachwood, OH 44122. Registered with the Ohio State Board of Career Colleges and Schools, Registration No. 15-03-2064T.