Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
MICROSOFT

Microsoft Certified:Information Security Administrator Associate

SC-401Information Security Administrator Associate

The Microsoft Certified: Information Security Administrator Associate certification validates your ability to plan and implement information security using Microsoft Purview and related services. It is designed for administrators responsible for protecting data in Microsoft 365 environments from internal and external threats. Earning this certification demonstrates your skills in implementing information protection, data loss prevention, and managing security alerts.

Practice Free Questions

322 practice questions · Updated 2026-07-28

3Domains
9Objectives
73Concepts
322Questions

SC-401 Curriculum

Every domain, objective, and concept the SC-401 exam measures.

Implement and manage data classification

11 concepts · 48 questions
  1. Identify Sensitive Information Requirements
  2. Translate Sensitive Information Requirements
  3. Create Custom Sensitive Info Types
  4. Manage Custom Sensitive Info Types
  5. Implement Document Fingerprinting
  6. Create Exact Data Match Sensitive Info Types
  7. Manage Exact Data Match Sensitive Info Types
  8. Create Trainable Classifiers
  9. Manage Trainable Classifiers
  10. Monitor Data Classification Usage
  11. Configure OCR for Sensitive Info Types

Implement and manage sensitivity labels in Microsoft Purview

7 concepts · 29 questions
  1. Administering Roles and Permissions
  2. Creating Sensitivity Labels
  3. Protection Settings Configuration
  4. Publishing Policies Management
  5. Auto-Labeling Policies
  6. Applying Labels to Containers
  7. Using Microsoft Defender for Cloud Apps

Implement information protection for Windows, file shares, and Exchange

8 concepts · 37 questions
  1. Microsoft Purview Information Protection Client Planning
  2. Microsoft Purview Information Protection Client Implementation
  3. File Management with Microsoft Purview
  4. Bulk Classification with Purview Scanner
  5. Design Microsoft Purview Message Encryption
  6. Implement Microsoft Purview Message Encryption
  7. Design Microsoft Purview Advanced Message Encryption
  8. Implement Microsoft Purview Advanced Message Encryption

Create and configure data loss prevention policies

6 concepts · 17 questions
  1. DLP Policy Design
  2. DLP Roles and Permissions
  3. DLP Policy Creation
  4. Adaptive Protection Configuration
  5. Policy and Rule Precedence
  6. File Policies in Defender for Cloud Apps

Implement and monitor Microsoft Purview Endpoint DLP

5 concepts · 34 questions
  1. Device Requirements for Endpoint DLP
  2. Advanced DLP Rules Configuration
  3. Endpoint DLP Settings Configuration
  4. Just-in-Time Protection Configuration
  5. Endpoint Activity Monitoring

Implement and manage retention

8 concepts · 30 questions
  1. Retention Labels Planning
  2. Adaptive Policy Scopes Management
  3. Retention Labels Creation
  4. Retention Label Policy Publishing
  5. Auto-Apply Retention Labels
  6. Policy Precedence Interpretation
  7. Retention Policies Configuration
  8. Content Recovery in Microsoft 365

Implement and manage Microsoft Purview Insider Risk Management

13 concepts · 52 questions
  1. Insider Risk Management Roles
  2. Insider Risk Management Permissions
  3. Insider Risk Management Connectors
  4. Integration with Microsoft Defender for Endpoint
  5. Insider Risk Management Settings
  6. Policy Indicators Configuration
  7. Policy Template Selection
  8. Insider Risk Management Policies
  9. Forensic Evidence Settings
  10. Adaptive Protection Risk Levels
  11. Insider Risk Alerts Management
  12. Insider Risk Cases Management
  13. Insider Risk Management Workflow

Manage information security alerts and activities

9 concepts · 38 questions
  1. Assign Purview Audit Licenses
  2. Investigate Activities with Purview Audit
  3. Configure Audit Retention Policies
  4. Analyze Activities with Activity Explorer
  5. Respond to DLP Alerts
  6. Investigate Insider Risk Activities
  7. Respond to Purview Alerts in Defender XDR
  8. Respond to Cloud Apps File Policy Alerts
  9. Perform eDiscovery Searches

Protect data used by AI services

6 concepts · 37 questions
  1. Microsoft Purview Controls
  2. Microsoft 365 AI Protection
  3. DSPM Prerequisites for AI
  4. DSPM Role Management
  5. DSPM Policy Configuration
  6. DSPM Activity Monitoring
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Practice Free Questions

Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for SC-401, so none is invented.