Microsoft / Security and identity
Protect information with Purview
Understand Microsoft 365 content and data ownership before defining information policies.
Optional foundation
Check your starting knowledge
Use SC-900 to review the basics. You do not need to take this foundation exam to follow our route. If you already know the material, move on.
SC-900 — Security, Compliance, and Identity Fundamentals
Core learning · SC-401
Learn the role, one area at a time
Work through the official guide and its learning resources. Use these three study blocks to organize your notes; the official skills outline remains your complete coverage checklist.
- 1.Classify and protect sensitive information
- 2.Implement loss prevention and retention
- 3.Investigate information risks, alerts and activity
Hands-on consolidation
Put it into practice
Use fictional documents to design a labeling and DLP policy. Define exceptions and test cases, including a legitimate business workflow.
Ready to move on when…
You can explain what a control prevents and how to investigate false positives.
Use a dedicated lab and synthetic data, never an employer's production environment. Check licensing and costs before provisioning; budget alerts do not stop spending. Remove resources when finished.
Review & exam planning
Find gaps with our SC-401 test
Try the test, explain each missed answer and return to the corresponding learning topic. Repeat the practical task where needed. A practice score is feedback, not proof of certification readiness.
SC-401 — Microsoft Information Security Administrator
Before booking, check the official page for current exam availability, any retirement or beta notice, and the credential's full requirements. This guide does not track completion or award a certificate.