MICROSOFT

★★★★★

(2,095 ratings) 50,000+ Student

MICROSOFT SC-401 – INFORMATION SECURITY ADMINISTRATOR

The Microsoft SC-401 – Information Security Administrator course is designed for professionals who want to build practical skills in protecting organizational data with Microsoft Purview. The training covers Information Protection, Data Loss Prevention (DLP), data retention, Insider Risk Management, Audit, risk management, and security for AI interactions and environments. Through hands-on labs and job-oriented scenarios, learners gain practical experience in identifying data risks, applying protection policies, managing alerts, and improving information security. This course is ideal for Microsoft 365 administrators, security professionals, compliance specialists, IT administrators, cloud professionals, and learners preparing for the SC-401 certification.

Radical Technologies

50,000+ English 40 hours Weekdays / Weekends Classroom / Online / Corporate

Online / Classroom

IT Training Programme

Duration 40 hours

Batch Type Weekdays / Weekends

Mode of Training Classroom / Online / Corporate

Locations Pune, Bangalore, Kochi

Language English

Certification Globally Recognized

Call Now

100% placement assistance

What you'll learn

Understand core concepts and architecture from the ground up

Get hands-on with the tools used by working professionals

Build real-world projects you can add to your portfolio

Learn industry best practices and coding standards

Practice with real datasets and real-world scenarios

Prepare for certification and technical interviews

Work on collaborative, team-based exercises

Apply performance tuning and optimization techniques

Understand how the technology fits into a larger ecosystem

Complete assignments reviewed by mentors

Programme Overview

27 sections covering the complete curriculum — a single, progressive learning arc.

40 hours

Training Duration

Core Modules

484

Total Lessons

4.4★

Average Rating

50K+

Students Trained

Foundations & Core Concepts

Get hands-on with the fundamentals and architecture — the building blocks for everything that follows.

Fundamentals Architecture Setup

Hands-On Practical Training

Work through real exercises and assignments designed to mirror what you will do on the job.

Practicals Assignments Labs

Real-World Projects

Apply what you have learned to end-to-end projects that go straight into your portfolio.

Projects Portfolio Case Studies

Advanced Techniques

Go beyond the basics with advanced concepts, integrations and production-grade practices.

Advanced Integration Best Practices

Ecosystem Integration

Understand how this technology connects with the broader tools and platforms used in the industry.

Ecosystem Tools Platforms

Performance & Interview Prep

Master optimization techniques and prepare for the technical interview questions employers actually ask.

Optimization Interview Prep Certification

Who is this programme for?

Whether you're already writing code, working with data, or supporting applications today — this programme is built to take you into a MICROSOFT role.

Software Developers

Engineers who want to add this skill set to their toolkit

Analysts & Consultants

Professionals moving into a more technical, hands-on role

IT Professionals

System admins and support engineers upskilling into a new domain

Fresh Graduates

CS/IT graduates aiming for a job-ready technical role

Course Curriculum

27 sections • 484 lessons • 40 hours

Jump to Section

Total Duration

40 hours

100% Practical · Unlimited Doubt Sessions

01 Microsoft SC-401 – Information Security Administrator

32–40 Hours Job-Oriented Training Program

This syllabus is aligned to the current SC-401 exam objectives effective July 28, 2026.

Microsoft currently weights the exam across three major areas: Implement Information Protection (30–35%), Implement Data Loss Prevention and Retention (30–35%), and Manage Risks, Alerts, and Activities (30–35%).

Microsoft’s current SC-401 course also covers Microsoft Purview Information Protection, DLP, retention, Insider Risk Management, Audit, and protection of AI interactions/environments.

02 1. Course Overview

The Microsoft SC-401 Information Security Administrator program prepares learners to design, implement and manage information security controls for Microsoft 365 environments using Microsoft Purview and related Microsoft security services.

Complete Learning Path

Security Fundamentals → Microsoft Purview → Data Classification → Sensitivity Labels → Information Protection → DLP → Endpoint DLP → Retention → Insider

Risk → Audit → eDiscovery → Defender for Cloud Apps → AI Data Security → Incident Investigation → Automation → Enterprise Capstone

03 2. Prerequisites

• Basic Microsoft 365 knowledge

• Basic understanding of cybersecurity

• Understanding of Microsoft Entra ID

• Basic knowledge of Microsoft 365 workloads

• Familiarity with security and compliance concepts

• Basic PowerShell knowledge recommended

• Basic understanding of Microsoft Defender recommended

Microsoft recommends familiarity with Microsoft 365 services, PowerShell, Microsoft Entra, the Microsoft Defender portal and Microsoft Defender for Cloud Apps for the

role.

04 3. 40-hour Training Structure

ModuleTopicHours

Microsoft Security & Purview Fundamentals

Data Classification & Sensitive Information

Sensitivity Labels & Information Protection

Data Loss Prevention – DLP

Endpoint DLP & Adaptive Protection

Retention & Information Governance

Insider Risk Management

Audit, eDiscovery, Alerts & Investigations

AI Data Security & DSPM for AI

Automation, Troubleshooting & Capstone

Total

40 Hours

05 Module 1 — Microsoft Security & Purview Fundamentals 3 Hours

Fundamentals

• Microsoft 365 Security Architecture

• Information Security Administrator role

• Microsoft Purview overview

• Microsoft Purview portal

• Microsoft Defender portal

• Microsoft Entra fundamentals

• Microsoft 365 compliance concepts

• Data security lifecycle

• Information governance

• Data classification

• Data protection

• Risk reduction

• Zero Trust concepts

• Microsoft Purview roles and permissions

Core Topics

• Microsoft Purview solutions

• Security vs compliance

• Data governance

• Insider vs external threats

• Microsoft 365 collaboration workloads

• SharePoint

• OneDrive

• Exchange

• Teams

• Power BI

Hands-On Labs

›1. Explore Microsoft Purview Portal
›2. Configure Purview Roles
›3. Configure Administrative Permissions
›4. Explore Data Explorer
›5. Explore Content Explorer

Assignment

Design a Microsoft 365 Information Protection Strategy for an Enterprise.

Job Scenario

›A company wants to protect confidential HR, finance and customer information across
›Microsoft 365. Design the initial Purview security architecture.

06 Module 2 — Data Classification & Sensitive Information 4 Hours

Core Technical Topics

• Data classification fundamentals

• Sensitive Information Types

• Built-in Sensitive Information Types

• Custom Sensitive Information Types

• Sensitive data discovery

• Keyword matching

• Regular expressions

• Confidence levels

• Supporting elements

• Document fingerprinting

• Exact Data Match (EDM)

• Trainable classifiers

• Data Explorer

• Content Explorer

• OCR support

These capabilities are explicitly included in Microsoft’s current SC-401 study objectives.

Hands-On Labs

›1. Create Custom Sensitive Information Type
›2. Configure Regex-Based Detection
›3. Configure EDM
›4. Configure Document Fingerprinting
›5. Configure Trainable Classifier
›6. Analyze Data Explorer
›7. Investigate Content Explorer
›8. Configure OCR Support

Assignment

Create a classification strategy for financial and customer data.

Mini Project

Enterprise Sensitive Data Discovery & Classification

Job Scenario

›Identify credit-card, employee and customer information stored across Microsoft 365 and
›create appropriate detection mechanisms.

07 Module 3 — Sensitivity Labels & Information Protection 5 Hours

Core Technical Topics

• Microsoft Purview Information Protection

• Sensitivity Labels

• Label taxonomy

• Label permissions

• Label policies

• Encryption

• Access controls

• Content marking

• Headers

• Footers

• Watermarks

• Auto-labeling

• Manual labeling

• Container labeling

• Teams labeling

• Microsoft 365 Groups

• SharePoint labeling

• Power BI labeling

• Defender for Cloud Apps integration

• Purview Information Protection client

• On-premises file classification

• Purview Information Protection scanner

• Message Encryption

• Advanced Message Encryption

Hands-On Labs

›1. Create Sensitivity Labels
›2. Configure Encryption
›3. Configure Content Marking
›4. Create Label Publishing Policy
›5. Create Auto-Labeling Policy
›6. Apply Labels to Teams
›7. Apply Labels to SharePoint
›8. Configure Message Encryption
›9. Configure Information Protection Scanner

Assignment

Create a four-level enterprise sensitivity-label hierarchy.

Example:

Public → Internal → Confidential → Highly Confidential

Mini Project

Enterprise Document Protection Solution

08 Module 4 — Data Loss Prevention (dlp) 5 Hours

Core Technical Topics

• DLP fundamentals

• DLP architecture

• DLP policies

• DLP rules

• Sensitive Information Types

• Policy locations

• Exchange DLP

• SharePoint DLP

• OneDrive DLP

• Teams DLP

• Power BI considerations

• Endpoint DLP

• Policy tips

• User notifications

• Incident reports

• Alerts

• Overrides

• False positives

• Policy precedence

• Adaptive Protection

• Defender for Cloud Apps DLP

Microsoft currently places DLP and retention together as a 30–35% exam domain.

Hands-On Labs

›1. Create DLP Policy
›2. Configure DLP Rules
›3. Configure User Notifications
›4. Configure Policy Tips
›5. Configure DLP Alerts
›6. Configure DLP Overrides
›7. Test Exchange DLP
›8. Test SharePoint DLP
›9. Test Teams DLP
›10. Investigate DLP Incidents

Assignment

Create an enterprise DLP policy to prevent sensitive financial data from leaving the

organization.

Mini Project

Corporate Data Loss Prevention Implementation

Job Scenario

›An employee attempts to send customer financial information to a personal email account.
›Design a DLP policy that detects, alerts and prevents the activity.

09 Module 5 — Endpoint Dlp & Adaptive Protection 4 Hours

Core Topics

• Endpoint DLP

• Device onboarding requirements

• Endpoint DLP settings

• Device activities

• File activities

• Browser activities

• USB restrictions

• Clipboard restrictions

• Print restrictions

• Network share controls

• Cloud upload controls

• Just-in-time protection

• Adaptive Protection

• Insider risk levels

• Endpoint monitoring

Hands-On Labs

›1. Configure Endpoint DLP
›2. Configure Device Restrictions
›3. Configure USB Controls
›4. Configure Printing Controls
›5. Configure Clipboard Controls
›6. Configure Cloud Upload Controls
›7. Configure Just-in-Time Protection
›8. Investigate Endpoint Activity

Assignment

Create an Endpoint DLP policy for a financial organization.

Job Scenario

›A departing employee is downloading hundreds of confidential files to a USB device. Detect
›and control the activity

10 Module 6 — Retention & Information Governance 4 Hours

Core Topics

• Data lifecycle management

• Retention policies

• Retention labels

• Retention label policies

• Auto-apply retention labels

• Adaptive policy scopes

• Retention settings

• Retention vs deletion

• Disposition

• Records management

• Policy precedence

• Policy Lookup

• Recover retained content

Hands-On Labs

›1. Create Retention Label
›2. Create Retention Policy
›3. Publish Retention Labels
›4. Auto-Apply Retention Labels
›5. Configure Adaptive Scope
›6. Test Policy Precedence
›7. Perform Policy Lookup
›8. Recover Retained Content

Assignment

Design a seven-year retention policy for financial documents.

Mini Project

Enterprise Records Retention & Data Lifecycle Management

11 Module 7 — Insider Risk Management 4 Hours

Core Topics

• Insider risk fundamentals

• Insider Risk Management

• Risk indicators

• Policy templates

• Custom policies

• Risk levels

• Risk scoring

• Alerts

• Cases

• Investigations

• Privacy considerations

• Forensic evidence

• Notice templates

• Insider Risk connectors

• Microsoft Defender for Endpoint integration

• Adaptive Protection

Microsoft’s current learning path specifically covers planning, settings, connectors, policy

creation, investigation and insider-risk cases.

Hands-On Labs

›1. Configure Insider Risk Settings
›2. Create Insider Risk Policy
›3. Configure Indicators
›4. Configure Risk Levels
›5. Generate Test Alert
›6. Investigate Risk Alert
›7. Create Insider Risk Case
›8. Investigate User Activity

Assignment

Develop an Insider Risk Management strategy for a large enterprise.

Mini Project

Employee Data Exfiltration Detection & Investigation

12 Module 8 — Audit, Ediscovery,alerts & Investigations 3 Hours

Core Topics

• Microsoft Purview Audit

• Audit Standard

• Audit Premium

• Audit retention

• Activity Explorer

• DLP alerts

• Insider Risk alerts

• Defender XDR alerts

• Defender for Cloud Apps alerts

• eDiscovery

• Content search

• Investigation workflow

• Incident response

• Security evidence

Hands-On Labs

›1. Perform Audit Search
›2. Investigate User Activity
›3. Analyze Activity Explorer
›4. Investigate DLP Alert
›5. Investigate Insider Risk Alert
›6. Perform eDiscovery Search
›7. Investigate Security Incident

Assignment

Investigate a suspected data exfiltration incident using Purview Audit and Activity

Explorer.

13 Module 9 — Ai Data Security & Dspm For Ai 3 Hours

This is an important current SC-401 component. Microsoft’s July 2026 objectives explicitlyinclude protecting data used by AI services and configuring Data Security Posture Management (DSPM) for AI.

Core Topics

• AI security fundamentals

• Microsoft 365 Copilot data protection

• Purview controls for AI • Protecting sensitive data used by AI

• AI interactions

• AI activity monitoring • DSPM for AI

• DSPM roles

• DSPM policies

• AI data risks

• AI security posture

•Microsoft Purview + AI governance

Hands-On Labs

›1. Configure AI Data Protection Controls
›2. Review AI Activities
›3. Configure DSPM for AI
›4. Investigate AI Data Risk
›5. Configure AI Security Policies

Assignment

›Create an AI Data Security Strategy for Microsoft 365 Copilot.
›Mini Project
›Microsoft 365 Copilot Data Protection & AI Security

14 Module 10 — Automation, Troubleshooting & Capstone 5 Hours

PowerShell

• PowerShell fundamentals

• Microsoft Graph

• Purview PowerShell

• User management

• Policy administration

• Reporting

• Automation

• Bulk operations

Troubleshooting

• DLP policy not triggering

• Incorrect sensitivity label assignment

• Label policy not appearing

• User cannot access protected content

• Retention policy conflict

• False-positive DLP alert

• Endpoint DLP not detecting activity

• Insider Risk alert not generated

• Audit activity missing

• Permission/role issues

• Policy precedence problems

• Data classification problems

15 Hands-on Labs – Master List

Microsoft Purview

• Purview Portal Configuration

• Roles & Permissions

• Data Explorer

• Content Explorer

Information Protection

• Sensitive Information Types

• Custom SIT

• EDM

• Document Fingerprinting

• Trainable Classifiers

• Sensitivity Labels

• Auto-Labeling

• Encryption

• Message Encryption

DLP

• Exchange DLP

• SharePoint DLP

• OneDrive DLP

• Teams DLP

• Endpoint DLP

• Adaptive Protection

• DLP Alerts

Governance

• Retention Labels

• Retention Policies

• Adaptive Scopes

• Policy Lookup

• Content Recovery

Risk & Investigation

• Insider Risk Policy

• Insider Risk Alert

• Insider Risk Case

• Audit Search

• Activity Explorer

• eDiscovery

• AI Data Protection

• DSPM for AI

• AI Risk Investigation

16 Assignments

1. Microsoft 365 Information Protection Strategy

2. Sensitive Information Classification Project

3. Enterprise Sensitivity Label Design

4. Financial Data DLP Policy

5. Endpoint DLP Implementation

6. Enterprise Retention Strategy

7. Insider Risk Management Policy

8. Data Exfiltration Investigation

9. Microsoft 365 Copilot Data Protection Strategy 10. DSPM for AI Security Assessment

17 Mini Projects

Project 1

Enterprise Data Classification & Sensitivity Labeling

Project 2

Corporate DLP Implementation

Project 3

Endpoint Data Protection

Project 4

Insider Risk Detection & Investigation

Project 5

Microsoft 365 AI Data Security

18 Capstone Project Enterprise Microsoft Purview Information Security Implementation

Business Scenario

›A 5,000-user organization wants to protect sensitive information across:

Exchange + Teams + SharePoint + OneDrive + Windows Endpoints + Microsoft 365 Copilot

Student Must Implement

• Data classification

• Sensitive Information Types

• Sensitivity Labels

• Auto-labeling

• Encryption

• DLP

• Endpoint DLP

• Retention

• Insider Risk Management

• Audit

• eDiscovery

• Alert investigation

• AI data protection

• DSPM for AI

Final Deliverables

• Security Requirements Document

• Data Classification Matrix

• Sensitivity Label Architecture

• DLP Policy Design

• Endpoint DLP Design

• Retention Matrix

• Insider Risk Strategy

• Audit & Investigation Procedure

• AI Security Strategy

• Test Cases

• Incident Investigation Report

• Executive Security Dashboard/Report

19 Real-time Job-oriented Scenarios

1. Prevent confidential documents from being emailed externally.

2. Stop sensitive files from being copied to USB.

3. Automatically classify financial documents.

4. Encrypt highly confidential documents.

5. Prevent sensitive data from being shared through Teams.

6. Configure retention for legal and financial records.

7. Investigate employee data exfiltration.

8. Investigate suspicious file downloads.

9. Investigate DLP violations.

10. Investigate insider-risk alerts.

11. Perform an audit investigation.

12. Conduct an eDiscovery investigation.

13. Protect Microsoft 365 Copilot data.

14. Identify AI-related data security risks.

15. Implement an enterprise Purview security architecture.

20 Troubleshooting Scenarios

DLP

• DLP policy not triggering

• DLP rule precedence issue

• False positives

• Policy tips not appearing

• User override problems

Sensitivity Labels

• Label not visible

• Label policy not applying

• Auto-labeling failure

• Encryption/access problem

• Container labeling issue

Retention

• Retention policy conflict

• Incorrect retention label

• Auto-apply failure

• Policy precedence problem

• Content recovery issue

21 Industry Tools

Microsoft Security & Compliance

• Microsoft Purview

• Microsoft Defender portal

• Microsoft Defender XDR

• Microsoft Defender for Cloud Apps

• Microsoft Entra ID

• Microsoft 365 Admin Center

• Microsoft Purview Audit

• Microsoft Purview eDiscovery

Administration & Automation Administration & Automation

• PowerShell

• Microsoft Graph

• Microsoft Graph Explorer

• Azure Cloud Shell

AI Security

• Microsoft Purview DSPM for AI

• Microsoft 365 Copilot security controls

• Microsoft Security Copilot

22 Best Practices

• Apply least-privilege administration.

• Build a clear data classification strategy.

• Use sensitivity labels consistently.

• Test DLP policies before enforcement.

• Minimize DLP false positives.

• Use policy precedence carefully.

• Implement appropriate retention periods.

• Monitor insider-risk activities responsibly.

• Maintain audit trails.

• Document security incidents.

• Protect AI interactions and sensitive data.

• Review permissions regularly.

• Use Microsoft Graph/PowerShell for repeatable administration.

• Regularly review Purview alerts and activities.

• Maintain security and compliance documentation.

23 Certification

Microsoft Certified: Information Security Administrator Associate

Exam: SC-401 – Administering Information Security in Microsoft 365

Microsoft currently identifies the certification as Intermediate / Administrator / Information protection and governance.

Exam Domains

1. Implement Information Protection — 30–35%

2. Implement Data Loss Prevention and Retention — 30–35%

3. Manage Risks, Alerts, and Activities — 30–35%

Microsoft Official Training

SC-401T00-A – Protect sensitive information with Microsoft Purview in the AI era

Microsoft currently lists this as a 4-day course associated with the Information Security Administrator Associate certification.

24 Mock Interviews

SC-401 Technical + Scenario-Based Interview Preparation

›
›Includes:
›• Purview questions
›• DLP scenarios
›• Sensitivity Label scenarios
›• Insider Risk scenarios
›• Audit investigations
›• AI security scenarios
›• Troubleshooting questions
›• Real-world implementation questions
›• HR interview preparation

25 Resume Preparation

Create an ATS-friendly Microsoft Information Security Administrator resume

highlighting:

Add real project-based responsibilities, security policies, implementations and troubleshooting scenarios rather than only listing technologies.

26 Placement Assistance

• ATS Resume Preparation

• LinkedIn Profile Optimization

• SC-401 Certification Guidance

• Project Portfolio Preparation

• Technical Mock Interviews

• Scenario-Based Interview Preparation

• Microsoft Security Interview Questions

• HR Interview Preparation

• Job Role Mapping

• Placement Assistance

27 Target Job Roles

• Information Security Administrator

• Microsoft Purview Administrator

• Microsoft 365 Security Administrator

• Data Security Administrator

• Information Protection Administrator

• DLP Administrator

• Compliance Security Administrator

• Information Governance Administrator

• Insider Risk Analyst

• Microsoft 365 Security Consultant

• Microsoft Purview Consultant

Tools & Technologies

Every tool listed here is installed, configured and used in a hands-on lab session.

Core Tools

Hands-On Labs

Practical Environment

Industry-Standard Tools

Real-World Setup

Guided Exercises

Skill Building

Sample Datasets

Practice Material

Practice & Projects

Mini Projects

Applied Practice

Assignments

Mentor Reviewed

Doubt Sessions

Live Support

Career Readiness

Resume Building

Career Support

Mock Interviews

Interview Prep

Certification Prep

Global Recognition

Deployment & Delivery

Production Practices

Real-World Ready

Best Practices

Industry Standards

484+

Hands-On Lessons

Core Modules

40 hours

Training Duration

100%

Practical Training

You don't just learn MICROSOFT SC-401 – INFORMATION SECURITY ADMINISTRATOR. You ship it.

Three major projects, each mirroring how production teams actually work — from guided foundations to a portfolio-ready capstone.

PROJECT // 01

Guided Foundation Project

→Requirement Analysis

→Guided Implementation

→Mentor Review

→Iteration

Foundation Beginner

Apply the fundamentals in a structured, mentor-reviewed project

Take the core concepts from the first half of the curriculum and apply them to a realistic scenario, with guidance and feedback from your mentor at every step.

Structured project brief

Step-by-step implementation

Mentor feedback and review

Documented outcome

Stack Core Concepts Best Practices

PROJECT // 02

Applied Practice Project

→Scenario Design

→Independent Build

→Testing & Validation

→Peer Review

Applied Intermediate

Build a more independent project mirroring real production scenarios

Work through a project that combines multiple concepts from the curriculum, closer to how work is actually structured on the job — less hand-holding, more ownership.

End-to-end implementation

Testing and validation

Documentation

Peer/mentor review

Stack Applied Skills Testing

PROJECT // 03

Capstone Project

→Planning

→End-to-End Build

→Review & Refinement

→Presentation

Capstone Advanced

Take a project from requirements to a polished, portfolio-ready deliverable

Your final project — plan, build, test and present a complete solution using everything covered in the curriculum, reviewed by mentors before you graduate.

Complete working solution

Presentation-ready documentation

Mentor sign-off

Portfolio-ready deliverable

Stack Full Curriculum Portfolio

All 3 projects go directly into your portfolio & resume — reviewed by mentors before you graduate.

See Sample Project Reports

Upcoming Batches

No upcoming batches scheduled right now. Enquire to get notified.

Why Radical Technologies

Live Online Training

Highly practical oriented training
Installation support on your system
24/7 Email and Phone support
100% Placement Assistance
Global Certification Preparation
Trainer-Student Interactive Portal
Assignments and Projects by Mentors

Enroll Now

Live Classroom Training

Weekend / Weekdays / Morning / Evening batches
80:20 Practical and Theory ratio
Real-life Case Studies
Easy make-up for missed sessions
PSI | Kryterion | Redhat Test Centers
Lifetime Video Classroom Access (coming soon)
Resume Prep and Mock Interviews

Enroll Now

Self-Paced Training

Learn 300+ courses at your own time
50,000+ Satisfied Learners
Course Completion Certificate
Practical Labs available
Mentor Support available
Doubt Clearing Session available
10% Discounted Global Certification

Enroll Now

Like the Curriculum? Let's Get Started

Join 50,000+ students already enrolled at Radical Technologies

Enroll Now

Global Certification

Radical Technologies is the leading IT certification institute in Pune, offering globally recognized certifications across various domains. With expert trainers and comprehensive materials, we ensure students gain in-depth knowledge and hands-on experience to excel in their careers. Our certification programs are tailored to meet industry standards — from cloud technologies to data science — empowering individuals to stay ahead in the ever-evolving tech landscape.

Career Services

At Radical Technologies, we are committed to your success beyond the classroom. Our 100% Job Assistance program ensures that you are not only equipped with industry-relevant skills but also guided through the job placement process. With personalised resume building, interview preparation, and access to our extensive network of hiring partners, we help you take the next step confidently into your IT career.