SC-400T00 Administering Information Protection and Compliance in Microsoft 365

1 – Describe security and compliance concepts

• Describe the shared responsibility model
• Describe defense in depth
• Describe the Zero Trust model
• Describe governance, risk, and compliance (GRC) concepts
• Module assessment

2 – Describe identity concepts

• Define authentication and authorization
• Define identity as the primary security perimeter
• Describe the role of the identity provider
• Describe the concept of directory services and Active Directory
• Describe the concept of federation
• Module assessment

3 – Describe the function and identity types of Microsoft Entra ID

• Describe Microsoft Entra ID
• Describe types of identities
• Describe hybrid identity
• Describe external identities
• Module assessment

4 – Describe the authentication capabilities of Microsoft Entra ID

• Describe authentication methods
• Describe multifactor authentication
• Describe self-service password reset
• Describe password protection and management capabilities
• Module assessment

5 – Describe access management capabilities of Microsoft Entra

• Describe Conditional Access
• Describe Global Secure Access in Microsoft Entra
• Describe Microsoft Entra roles and role-based access control (RBAC)
• Module assessment

6 – Describe the identity protection and governance capabilities of Microsoft Entra

• Describe Microsoft Entra ID Governance
• Describe access reviews
• Describe entitlement management
• Describe the capabilities of Privileged identity Management
• Describe Microsoft Entra ID Protection
• Describe Microsoft Entra Verified ID
• Describe Microsoft Entra integration with Microsoft Security Copilot
• Module assessment

7 – Describe Microsoft Security Copilot

• Get acquainted with Microsoft Security Copilot
• Describe Microsoft Security Copilot terminology
• Describe how Microsoft Security Copilot processes prompt requests
• Describe the elements of an effective prompt
• Describe how to enable Microsoft Security Copilot
• Module assessment

8 – Describe core infrastructure security services in Azure

• Describe Azure DDoS protection
• Describe Azure Firewall
• Describe Web Application Firewall
• Describe network segmentation in Azure
• Describe Azure Network Security Groups
• Describe Azure Bastion
• Describe Azure Key Vault
• Module assessment

9 – Describe the security management capabilities in Azure

• Describe Microsoft Defender for Cloud
• Describe how security policies and initiatives improve cloud security posture
• Describe Cloud security posture management
• Describe the enhanced security of Microsoft Defender for Cloud
• Describe DevOps security management
• Module assessment

10 – Describe security capabilities of Microsoft Sentinel

• Describe threat detection and mitigation capabilities in Microsoft Sentinel
• Describe Microsoft Sentinel integration with Microsoft Security Copilot
• Module assessment

11 – Describe threat protection with Microsoft Defender XDR

• Describe Microsoft Defender XDR services
• Describe Microsoft Defender for Office 365
• Describe Microsoft Defender for Endpoint
• Describe Microsoft Defender for Cloud Apps
• Describe Microsoft Defender for Identity
• Describe Microsoft Defender Vulnerability Management
• Describe Microsoft Defender Threat Intelligence
• Describe the Microsoft Defender portal
• Describe Copilot integration with Microsoft Defender XDR
• Module assessment

12 – Describe Microsoft’s Service Trust portal and privacy capabilities

• Describe the offerings of the Service Trust portal
• Describe Microsoft’s privacy principles
• Describe Microsoft Priva
• Module assessment

13 – Describe the data security solutions of Microsoft Purview

• Describe the data classification capabilities of Microsoft Purview Information Protection
• Describe sensitivity labels and policies in Microsoft Purview Information Protection
• Describe data loss prevention in Microsoft Purview
• Describe insider risk management in Microsoft Purview
• Describe adaptive protection in Microsoft Purview
• Module assessment

14 – Describe the data compliance solutions of Microsoft Purview

• Describe audit in Microsoft Purview
• Describe eDiscovery
• Describe Compliance Manager
• Describe Communication Compliance
• Describe Data Lifecycle Management
• Describe Records Management
• Module assessment

15 – Describe the data governance solutions of Microsoft Purview

• Describe the concepts and benefits of data governance
• Describe Microsoft Purview Data Catalog
• Module assessment