Microsoft Certified: Information Security Administrator Associate course image

Microsoft Certified: Information Security Administrator Associate

Prepare for exam SC-401 by learning to protect sensitive data in Microsoft 365 with Purview labels, data loss prevention, retention, and insider risk tools.

$2,395.00

Description

Prepare for exam SC-401 by learning to protect sensitive data in Microsoft 365 with Purview labels, data loss prevention, retention, and insider risk tools.

Price$2,395Includes the SC-401 exam voucher
Time22 course hoursOn-demand video and labs, plus 2 hours of coaching
DeliveryOn-demand asynchronous trainingWith online support and 2 hours of coaching
ExamSC-401Exam SC-401: Administering Information Security in Microsoft 365 (Microsoft Certified: Information Security Administrator Associate)

About this course

This course prepares you for exam SC-401, which replaced SC-400 in 2025 for this certification. You work through the three equally weighted skill areas: information protection, data loss prevention and retention, and managing risks, alerts, and activities. Each module includes a lab in a Microsoft 365 trial tenant, including protecting data used by AI services.

Who it is for

This course is for Microsoft 365 administrators, information security administrators, and compliance staff who plan and implement data protection with Microsoft Purview alongside governance, data, and security teams.

Prerequisites

Working familiarity with Microsoft 365 services such as Exchange Online, SharePoint, OneDrive, and Teams

Basic experience with Microsoft Entra and PowerShell

Awareness of the Microsoft Defender portal and Defender for Cloud Apps is helpful

Requirements

A modern web browser for the Microsoft Purview and Defender portals

A time-limited Microsoft 365 E5 trial tenant, or paid Microsoft 365 E5 or Purview premium licensing, for hands-on labs

Windows PowerShell or PowerShell 7 for a few administration tasks

Exam

Exam SC-401: Administering Information Security in Microsoft 365 (Microsoft Certified: Information Security Administrator Associate) (SC-401). This course prepares you for exam SC-401, and one exam attempt voucher is included. Many objectives depend on Microsoft 365 E5 or Purview premium features, so most learners need additional self-study and hands-on practice in a trial tenant beyond the course hours, plus the free Microsoft practice assessment. Passing is not guaranteed. Microsoft is making a minor update to the sensitivity label objectives in October 2026.

What you will be able to do

  • You will be able to create sensitive information types and classifiers to find sensitive data across Microsoft 365.
  • You will be able to publish sensitivity labels with auto-labeling and message encryption.
  • You will be able to build data loss prevention policies, including Endpoint DLP, and tune them from alerts.
  • You will be able to configure retention labels and policies and recover retained content.
  • You will be able to set up Insider Risk Management and investigate activity with audit and eDiscovery.

Syllabus

1

Purview orientation and data classification 3.5 hours

Microsoft Purview portal, Sensitive information types, Trainable classifiers, Data explorer and content explorer.

Lab: You create a custom sensitive information type and confirm it finds matching content in a trial tenant.
2

Sensitivity labels, auto-labeling, and message encryption 3.5 hours

Sensitivity label design, Label policies, Auto-labeling, Microsoft Purview Message Encryption.

Lab: You publish a sensitivity label policy, configure auto-labeling for a sensitive data type, and send an encrypted message.
3

Data loss prevention policies and Endpoint DLP 4 hours

DLP policy design, Policy tips and overrides, Endpoint DLP, DLP alerts.

Lab: You build a DLP policy that blocks sharing of sensitive data in email and on a device, then test it.
4

Retention labels, retention policies, and recovery 3 hours

Retention policies, Retention labels, Adaptive scopes, Content recovery.

Lab: You apply a retention policy and a retention label, delete a labeled item, and recover it.
5

Insider Risk Management and Adaptive Protection 4 hours

Insider Risk Management policies, Risk indicators, Adaptive Protection, Case review.

Lab: You configure an Insider Risk Management policy and connect it to Adaptive Protection for higher-risk users.
6

Alerts, audit, eDiscovery, DSPM for AI, and exam readiness 4 hours

Alert management, Audit search, eDiscovery cases, Data Security Posture Management for AI, SC-401 practice assessment review.

Lab: You run an audit search and an eDiscovery case, review DSPM for AI findings, and complete the free practice assessment.
+

Coaching sessions 2 hours

One-on-one or small-group coaching, scheduled with your coach.

How it is delivered

How you learn

On-demand asynchronous training with online support, plus 2 hours of coaching.

Live or in person

Live online or in-person sessions are available for an additional fee. Email admissions@wecancodeit.org for details.

TechCred

Eligible credential

Microsoft Certified: Information Security Administrator Associate

Reimbursement applies only to the credential approved in your TechCred application, so use the exact credential name shown on this page.

Funding

Ohio's TechCred program may reimburse eligible Ohio employers up to $1,000 per person, per credential, and up to $30,000 per application, for eligible costs such as tuition and certification costs.

TechCred's maximum is $1,000 per person, per credential, toward this price.

Timeline

The current application period opens at 9:00 a.m. on October 1, 2026 and closes at 3:00 p.m. on October 30, 2026.

Training must start no earlier than the first day of the application period and be completed within 12 months of the award date.

What we provide

For each learner, We Can Code IT provides an itemized per-person invoice that shows the exact credential name, and a certificate that shows the learner's name, the credential and the date earned (or the vendor's exam record for certifications). We can also send a written quote to include with your TechCred application.

Pricing is the same for all customers, whether or not you use TechCred.

We Can Code IT is an independent training provider. Being listed as an eligible TechCred provider is not an endorsement by the State of Ohio and does not guarantee funding. The Ohio Department of Development makes all TechCred decisions, so check the state's current program guidelines before you apply. Program details: the State of Ohio’s TechCred page.

Enroll your team

One or a few learners

Choose the number of seats, add the course to your cart and check out.

A group, or a written quote

Send the form below for group enrollment or a written quote to include with your TechCred application. We reply within one business day. You can also email admissions@wecancodeit.org.

Request group enrollment or a written quote

Tell us about your team and we will reply within one business day.

← Back

Thank you for your response. ✨

We Can Code IT, LLC, 26300 Cedar Rd, Suite 1105, Beachwood, OH 44122. Registered with the Ohio State Board of Career Colleges and Schools, Registration No. 15-03-2064T.

Syllabus