SC-400 Microsoft Certified Information Protection and Compliance Administrator Associate Exam Prep

Topic 1 Introduction to information protection and data lifecycle management in Microsoft Purview

• Introduction to information protection and data lifecycle management
• Know your data
• Protect your data
• Prevent data loss
• Govern your data

Topic 2 Classify data for protection and governance

• Data classification overview
• Classify data using sensitive information types
• Classify data using trainable classifiers
• Review sensitive information and label usage
• Explore labeled and sensitive content
• Understand activities related to your data

Topic 3 Create and manage sensitive information types

• Compare built-in versus custom sensitive information types
• Create and manage custom sensitive information types
• Describe custom sensitive information types with exact data match
• Implement document fingerprinting
• Describe named entities
• Create keyword dictionary

Topic 4 Understand Microsoft 365 encryption

• Introduction to Microsoft 365 encryption
• Learn how Microsoft 365 data is encrypted at rest
• Understand service encryption in Microsoft Purview
• Explore customer key management using Customer Key
• Learn how data is encrypted in-transit

Topic 5 Deploy Microsoft Purview Message Encryption

• Implement Microsoft Purview Message Encryption
• Implement Microsoft Purview Advanced Message Encryption
• Use Microsoft Purview Message Encryption templates in mail flow rules

Topic 6 Create and configure sensitivity labels with Microsoft Purview

• Sensitivity label overview
• Create and configure sensitivity labels and label policies
• Configure encryption with sensitivity labels
• Implement auto-labeling policies
• Use the data classification dashboard to monitor sensitivity labels

Topic 7 Apply sensitivity labels for data protection

• Foundations of sensitivity label integration in Microsoft 365
• Apply sensitivity labels to Microsoft Teams, Microsoft 365 groups, and SharePoint sites
• Protect meetings with sensitivity labels
• Apply protections and restrictions to email and files
• Manage sensitivity labels in Office apps

Topic 8 Prevent data loss in Microsoft Purview

• Data loss prevention overview
• Identify content to protect
• Identify sensitive data with optical character recognition (preview)
• Define policy settings for your DLP policy
• Test and create your DLP policy
• Prepare Endpoint DLP
• Manage DLP alerts in the Microsoft Purview compliance portal
• View data loss prevention reports
• Implement the Microsoft Purview Extension

Topic 9 Configure DLP policies for Microsoft Defender for Cloud Apps and Power Platform

• Configure data loss prevention policies for Power Platform
• Integrate data loss prevention in Microsoft Defender for Cloud Apps
• Configure policies in Microsoft Defender for Cloud Apps
• Manage data loss prevention violations in Microsoft Defender for Cloud Apps

Topic 10 Manage data loss prevention policies and reports in Microsoft 365

• Configure data loss prevention for policy precedence
• Implement data loss prevention policies in test mode
• Explain data loss prevention reporting capabilities
• Manage permissions for data loss prevention reports
• Manage and respond to data loss prevention policy violations

Topic 11 Manage the data lifecycle in Microsoft Purview

• Data Lifecycle Management overview
• Configure retention policies
• Configure retention labels
• Configure manual retention label policies
• Configure auto-apply retention label policies
• Import data for Data Lifecycle Management
• Manage, monitor, and remediate Data Lifecycle Management

Topic 12 Manage data retention in Microsoft 365 workloads

• Explain retention in Exchange Online
• Explain retention in SharePoint Online and OneDrive
• Explain retention in Microsoft Teams
• Explain retention in Microsoft Yammer
• Recover content in Microsoft 365 workloads
• Activate archive mailboxes in Microsoft Exchange
• Apply mailbox holds in Microsoft Exchange
• Recover content in Microsoft Exchange

Topic 13 Manage records in Microsoft Purview

• Records management overview
• Import a file plan
• Configure retention labels
• Configure event driven retention
• Manage, monitor, and remediate records

Topic 14 Explore compliance in Microsoft 365

• Plan for security and compliance in Microsoft 365
• Plan your beginning compliance tasks in Microsoft Purview
• Manage your compliance requirements with Compliance Manager
• Examine the Compliance Manager dashboard
• Analyze the Microsoft Compliance score

Topic 15 Search for content in the Microsoft Purview compliance portal

• Explore Microsoft Purview eDiscovery solutions
• Create a content search
• View the search results and statistics
• Export the search results and search report
• Configure search permissions filtering
• Search for and delete email messages

Topic 16 Manage Microsoft Purview eDiscovery (Standard)

• Explore Microsoft Purview eDiscovery solutions
• Implement Microsoft Purview eDiscovery (Standard)
• Create eDiscovery holds
• Search for content in a case
• Export content from a case
• Close, reopen, and delete a case

Topic 17 Manage Microsoft Purview eDiscovery (Premium)

• Explore Microsoft Purview eDiscovery (Premium)
• Implement Microsoft Purview eDiscovery (Premium)
• Create and manage an eDiscovery (Premium) case
• Manage custodians and non-custodial data sources
• Analyze case content

Topic 18 Manage Microsoft Purview Audit (Standard)

• Explore Microsoft Purview Audit solutions
• Implement Microsoft Purview Audit (Standard)
• Search the audit log
• Export, configure, and view audit log records
• Use audit log searching to investigate common support issues

Topic 19 Prepare Microsoft Purview Communication Compliance

• Introduction to communication compliance
• Plan for communication compliance
• Identify and resolve communication compliance workflow
• Introduction to communication compliance policies
• Investigate and remediate communication compliance alerts

Topic 20 Manage insider risk in Microsoft Purview

• Insider risk management overview
• Introduction to managing insider risk policies
• Create and manage insider risk policies
• Investigate insider risk alerts
• Take action on insider risk alerts through cases
• Manage insider risk management forensic evidence
• Create insider risk management notice templates

Topic 21 Implement Microsoft Purview Information Barriers

• Explore Microsoft Purview Information Barriers
• Configure information barriers in Microsoft Purview
• Examine information barriers in Microsoft Teams
• Examine information barriers in OneDrive
• Examine information barriers in SharePoint

Topic 22 Manage regulatory and privacy requirements with Microsoft Priva

• Create and manage risk management policies
• Investigate and remediate risk management alerts
• Create rights requests
• Manage data estimate and retrieval for rights requests
• Review data from rights requests
• Get reports from rights requests

Topic 23 Implement privileged access management

• Introduction to privileged access management
• Implementing privileged access management

Topic 24 Manage Customer Lockbox

• Introduction to Customer Lockbox
• Manage Customer Lockbox requests

Prerequisite:

HRDF Funding

Please refer to this video https://youtu.be/Kzpd-V1F9Xs

1-     HRD Corp Grant Helper

How to submit grant applications for HRD Corp Claimable Courses

2-     Employers are required to apply for the grant at least one week before training commences.

Employers must submit their applications with supporting documents, including invoices/quotations, trainer profiles, training schedule and course content.

3-     First, Login to Employer’s e-TRIS account -https://etris.hrdcorp.gov.my

Second, Click Application

4-     Click Grant on the left side under Applications

5-     Click Apply Grant on the left side under Applications

6-     Click Apply

7-     Choose a Scheme Code and select HRD Corp Claimable Courses: Skim Bantuan Latihan Khas. Then, click Apply

8-     Scheme Code represents all types of training that suit the requirements provided by HRD Corp. Below are the list of schemes offered by HRD Corp:

9-     Select your Immediate Officer and click Next

10-  Select a Training Provider, then click Next

11-  Please select a training programme from the list, then key in all the required details and click Next

Select your desired training programme.

Give an explanation on why the participant is required to attend the training. E.g., related to their tasks/ career development, etc.

Explain the background and objective of this training.

Select a relevant focus area. For Employer-Specific Courses, select ‘Not Applicable’.

12-  If the training programme is a micro-credential programme, you are required to complete these 3 fields. Save and click Next

Insert MiCAS Application number

13-  Based on the nine (9) pillars listed below, HRD Corp Focus Area Courses are closely tied to support government initiatives towards nation building. As such, courses offered through the HRD Corp Focus Areas are designed to provide the workforce with skills required for current and future demands. Details of the focus areas are as follows:

14-  Please select a Course Title and Type of Training

15-  Select the correct type of training according to the actual type of training, or as mentioned in the training brochure:

16-  Please key in the Training Location and click Next

17-  Please select the Level of Certification and click Next

18-  Please follow the instructions and key in trainee details

19-  Click Add Batch, then click Save

20-  Click Add Trainee Details

21-  Please key in all the required details, then click Add

22-  Click Add if there are more participants. Once done, click Save

23-  Click Next

24-  Please key in the course fees and allowance details, then click Save

25-  Estimated cost includes the course fees/external trainer fees, allowances, and consumable training materials. Please comply with the HRD Corp Allowable Cost Matrix.

26-  Select Upfront Payment to Training Provider and key in the percentage from 0% to 30%. Then, click Save and Next

27-  Complete the declaration form and select a desired officer

28-  Add all the required documents, then click Add Attachment. Then, click Save and Submit Application

29-  Once the New Grant Application is successfully submitted, the Grant Officer will evaluate the application accordingly. The application may be queried if additional information is required.

The application status will be updated via the employer’s dashboard, email, and the e-TRiS inbox.

• Compliance Manager
• Information Protection Specialist
• Data Governance Officer
• Security Compliance Analyst
• Microsoft 365 Compliance Administrator
• Risk Management Officer
• Data Privacy Officer
• Cybersecurity Consultant
• Information Security Auditor
• Regulatory Compliance Advisor
• Corporate Compliance Officer
• IT Security Manager
• Data Protection Manager
• Compliance Policy Manager
• Information Assurance Analyst
• Cloud Security Compliance Specialist
• Information Systems Security Officer
• Governance, Risk, and Compliance (GRC) Consultant
• Privacy and Compliance Legal Advisor
• Enterprise Risk Management Specialist

Dr. Zahra Nazemi: Dr. Zahra Nazemi has PhD in mathematical statistics from Universiti Putra Malaysia. Her research interests are applied statistics, medical statistics, Bayesian statistics, statistical inference and Software R. She has worked as lecturer in different universities more than 4 years. She also consulted and worked on assignments for parametric and non-parametric analysis, univariate and multivariate regression analysis in various areas such as medical, economics and psychology. Her other skills are knowledge of research methodology, extensive experience with SPSS, AMOS, R and MINITAB and writing and presenting reports. Moreover, she conducted special training program in mathematical programming including optimization, advanced multivariate data analysis, and simulation techniques

Dr. Aanand Verma: Dr. Aanand Verma is a Full Stack Data Scientist who once had a torrid love affair with Physics. He has consulted and published in the area of Public Health, Electricity Markets, Telecom, BFSI, Advertising & Communication Strategies and Digital & Social Media Technologies. He has worked on assignments with international agencies such as International Monetary Fund, World Bank, Royal Netherland Embassy etc. besides MNCs like Tata Consultancy Services, Kie Square Consulting and several government organizations of national importance.

He regularly conducts general training programs in Python (Pandas, NumPy, SciPy, Matplotlib, Bokeh), R (dplyr, rstanarm, knitR, ggplot2), Data Visualization (Tableau, D3.js) and Machine Learnng (Reinforced Learning, Scikit Learn) and specialized training programs on Structural Equation Modeling and SAP Hana.

He holds a doctorate in Operations Research from Indian Institute of Management Ahmedabad and a post graduate in Physics from University of Mumbai. He has advanced training in mathematical programming including optimization, advanced multivariate data analysis, and simulation techniques. When he is not teaching or consulting he can be found meditating or heading for an adventurous trek.

Tarun Sukhani: Tarun Sukhani is an IT executive, educator, author, speaker, data scientist, security expert, agile coach, polyglot coder, and entrepreneur with over 19 years of combined professional experience both in the U.S. and internationally. As a seasoned veteran, my expertise lies in leading teams in the design and delivery of highly scalable, concurrent, and performant enterprise software solutions with budgets of up to $100 million. I am particularly adept at building productive, self-managing agile teams with predictable velocities and delivery timeframes.

Tarun Sukhani is skilled in all phases of the SDLC/ALM, with a solid foundation in Agile (XP, SAFe, Lean, Scrum, Kanban, and Scrumban) and traditional (PMI and PRINCE2) project management frameworks and methodologies.

He is proficient in Big Data/Data Science: Hadoop, Pig, Hive, HBase, Spark, R/Rattle, Cassandra, YARN, Zookeeper, Mahout, SimpleCV, OpenCV