Administering Information Security in Microsoft 365 (SC-401)

The Microsoft Certified: Information Security Administrator Associate certification validates the skills needed to plan and implement information protection and risk mitigation strategies using Microsoft Purview and related Microsoft 365 security services. It is designed for information security administrators responsible for protecting sensitive data, implementing data loss prevention and retention policies, managing insider risk, and responding to security incidents. Candidates typically work closely with governance, compliance, and security teams to safeguard organizational data across Microsoft 365 environments.

This exam measures the following skills:

• Implement information protection
• Implement data loss prevention and retention
• Manage risks, alerts, and activities