Description

Questions: 131
Release Date: 09/2021 (Last Update: 12/2023)
Job Role: Administrator, Security Engineer
Language: English

The SC-400 practice test contains 131 questions and covers the following objectives: 

Implement information protection – 42 questions 

Create and manage sensitive information types

• Identify sensitive information requirements for an organization’s data
• Translate sensitive information requirements into built-in or custom sensitive info types
• Create and manage custom sensitive info types
• Create and manage exact data match (EDM) classifiers
• Implement document fingerprinting

Create and manage trainable classifiers

• Identify when to use trainable classifiers 
• Design and create a trainable classifier 
• Test a trainable classifier  
• Retrain a trainable classifier

Implement and manage sensitivity labels

• Implement roles and permissions for administering sensitivity labels
• Define and create sensitivity labels
• Configure and manage sensitivity label policies
• Configure auto-labeling policies for sensitivity labels
• Monitor data classification and label usage by using Content explorer, Activity explorer, and audit search
• Apply bulk classification to on-premises data by using the Microsoft Purview Information Protection scanner
• Manage protection settings and marking for applied sensitivity labels

Design and implement encryption for email messages

• Design an email encryption solution based on methods available in Microsoft 365 
• Implement Microsoft Purview Message Encryption 
• Implement Microsoft Purview Advanced Message Encryption 

Implement DLP – 22 questions

Create and configure DLP policies

• Design DLP policies based on an organization’s requirements
• Configure permissions for DLP
• Create and manage DLP policies
• Interpret policy and rule precedence in DLP
• Configure a Microsoft Defender for Cloud Apps file policy to use DLP policies

Implement and monitor Endpoint DLP

• Configure advanced DLP rules for devices in DLP policies
• Configure Endpoint DLP settings
• Recommend a deployment method for device onboarding
• Identify endpoint requirements for device onboarding
• Monitor endpoint activities
• Implement the Microsoft Purview Extension

Monitor and manage DLP activities

• Analyze DLP reports
• Analyze DLP activities by using Activity explorer
• Remediate DLP alerts in the Microsoft Purview compliance portal
• Remediate DLP alerts generated by Defender for Cloud Apps

Implement data lifecycle and records management – 32 questions

Retain and delete data by using retention labels

• Plan for information retention and disposition by using retention labels
• Create retention labels for data lifecycle management
• Configure and manage adaptive scopes
• Configure a retention label policy to publish labels
• Configure a retention label policy to auto-apply labels
• Interpret the results of policy precedence, including using Policy lookup

Manage data retention in Microsoft 365 workloads

• Create and apply retention policies for SharePoint and OneDrive
• Create and apply retention policies for Microsoft 365 groups
• Create and apply retention policies for Teams
• Create and apply retention policies for Yammer
• Create and apply retention policies for Exchange Online
• Apply mailbox holds in Exchange Online
• Implement Exchange Online archiving policies
• Configure preservation locks for retention policies and retention label policies
• Recover retained content in Microsoft 365

Implement Microsoft Purview records management

• Create and configure retention labels for records management
• Manage retention labels by using a file plan, including file plan descriptors
• Classify records by using retention labels and retention label policies
• Manage event-based retention
• Manage the disposition of content in records management
• Configure records management settings, including retention label settings and disposition settings

Monitor and investigate data and activities by using Microsoft Purview – 17 questions

Plan and manage regulatory requirements by using Microsoft Purview Compliance Manager

• Plan for regulatory compliance in Microsoft 365
• Create and manage assessments
• Create and modify custom templates
• Interpret and manage improvement actions
• Create and manage alert policies for assessments

• Choose between eDiscovery (Standard) and eDiscovery (Premium) based on an organization’s requirements
• Plan and implement eDiscovery
• Delegate permissions to use eDiscovery and Content search
• Perform searches and respond to results from eDiscovery
• Manage eDiscovery cases
• Perform searches by using Content search

• Choose between Audit (Standard) and Audit (Premium) based on an organization’s requirements
• Plan for and configure auditing
• Investigate activities by using the unified audit log
• Review and interpret compliance reports and dashboards
• Configure alert policies
• Configure audit retention policies

• Plan for communication compliance
• Create and manage communication compliance policies
• Investigate and remediate communication compliance alerts and reports

• Plan for insider risk management
• Create and manage insider risk management policies
• Investigate and remediate insider risk activities, alerts, and reports
• Manage insider risk cases
• Manage forensic evidence settings
• Manage notice templates

• Plan for IBs
• Create and manage IB segments and policies
• Configure Teams, SharePoint, and OneDrive to enforce IBs, including setting barrier modes
• Investigate issues with IB policies

• Configure and maintain privacy risk management
• Create and manage Privacy Risk Management policies
• Identify and monitor potential risks involving personal data
• Evaluate and remediate alerts and issues
• Implement and manage subject rights requests

Notes: 

• The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam. 
• Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.