Microsoft SC-401 Certification Preparation: Information Security Administrator
This course prepares administrators to protect sensitive Microsoft 365 data with Microsoft Purview. You put classification, sensitivity labels, data loss prevention, retention and insider risk management into practice, including for data used by AI services. The final day focuses on consolidation and SC-401 exam practice. You leave with a practical rollout plan you can adapt to your own tenant.
The essentials
Publisher : Microsoft
Certification : Microsoft Certified: Information Security Administrator Associate
Exam code : SC-401
Duration : 4 days (28 h)
Level : Intermediate
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Typically 40–60 questions · 100 min · passing score 700
Exam voucher: included or optional depending on the package — contact us.
Classify data with sensitive information types and classifiers
Design and publish sensitivity labels for files, email and sites
Extend protection to Windows devices, file shares and Exchange
Build DLP policies, including Endpoint DLP, and follow up on alerts
Set up retention and insider risk management
Protect data used by AI services such as Copilot
Investigate and respond to information security alerts
Program
Information protection (30–35%)
Data classification
Sensitivity labels in Purview
Protection for Windows, file shares and Exchange
Data loss prevention and retention (30–35%)
Creating and tuning DLP policies
Endpoint DLP deployment and monitoring
Retention policies and labels
Risks, alerts and activities (30–35%)
Insider risk management
Handling alerts and investigating activity
Protecting data used by AI services
Prerequisites
Hands-on Microsoft 365 administration
Basic PowerShell
Familiarity with Microsoft Entra, the Microsoft Defender portal and Defender for Cloud Apps
Target audience
Information protection and compliance administrators
Microsoft 365 admins in charge of DLP
Data protection officers and privacy leads who want the technical side
Teams preparing a Copilot rollout
The exam
The SC-401 exam lasts 100 minutes and usually has 40 to 60 questions, including multiple choice, drag and drop, hot area and case studies. You take it through Pearson VUE at a test centre or online with a remote proctor, and need 700 to pass. It is offered in English, French and several other languages. The Associate certification is valid for one year and renews for free through an online assessment on Microsoft Learn. Microsoft has announced an update to the English version on 14 October 2026.
Preparation tips
All three domains weigh almost the same, so split your revision evenly
Try labels and DLP in a trial tenant to see how they actually behave
Learn how label priority and retention precedence work
Frequently asked questions (FAQ)
What is the difference between SC-400 and SC-401?
SC-401 succeeded SC-400. It keeps the core of information protection, data loss prevention and retention, and adds newer topics such as protecting data used by AI services and Endpoint DLP in more depth.
Do I need a Microsoft 365 E5 licence to practise?
Several Purview features need advanced licences. During the course, labs run on demo environments; afterwards a trial tenant is usually enough to keep practising.
Does the course help with a Copilot rollout?
Yes. The exam covers protecting data used by AI services, and we connect sensitivity labels and DLP to the oversharing risks that come with AI assistants, so your team can prepare a Copilot rollout with clear guardrails.
How long does the certification last?
One year. Renewal is free and done online during the six months before expiry, without resitting the full exam.
Is SC-401 suitable for non-technical compliance staff?
It is fairly technical. For a first look at the topic, SC-900 is a better fit; SC-401 is for people who actually configure Purview policies day to day or lead their deployment.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a Microsoft training partner. Microsoft, Microsoft 365, Microsoft Purview and Microsoft Copilot are trademarks of Microsoft.