After this course you can plan the protection of sensitive data in Microsoft 365 and implement it with Microsoft Purview: classify data, apply labels, prevent data loss, manage retention and respond to alerts. You will also know how to protect content when your organisation uses AI services. The course suits you if you administer Microsoft 365 or work in security and are aiming for exam SC-401. You should already be comfortable with Microsoft 365 services and PowerShell.
What you’ll take away.
- Plan and configure sensitive info types and sensitivity labels
- Design DLP policies and interpret their precedence correctly
- Manage retention and the data lifecycle with labels and policies
- Investigate insider risks, alerts and activities
- Protect content in environments that use AI services with Purview controls
Your training in detail
- Who is it for?
- Administrators and security professionals who plan and implement the protection of sensitive data in Microsoft 365.
- Prerequisites
- You should be familiar with Microsoft 365 services, PowerShell, Microsoft Entra, the Defender portal and Defender for Cloud Apps.
- Format & planning
- Standard length: 4 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Data classification: info types, fingerprinting and trainable classifiers
Sensitivity labels, auto-labelling and encryption
DLP policies for Microsoft 365 and endpoints
Retention labels, policies and recovery
Insider Risk Management and Adaptive Protection
Alerts, auditing and eDiscovery searches
Protecting data in AI services with DSPM for AI
For a fictional HR department you design a labelling scheme, a DLP policy and a retention rule, then test them against edge cases.
Exams, licences & credentials
This course prepares you for exam SC-401 for the Microsoft Certified: Information Security Administrator Associate certification. The exam and its fees are included only if your offer confirms this. The certificate comes from Microsoft, not NextNowa. This is not an official Microsoft course.
Vendor references & review date
Sources checked on 2026-11-04. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
What does SC-401 assess?
According to Microsoft, three roughly equal areas: information protection, DLP and retention, and risks, alerts and activities.
How long is the certification valid?
Microsoft certifications of this type expire annually. You can renew them with a free online assessment on Microsoft Learn.
Does SC-401: Administering Information Security in Microsoft 365 include a certificate?
This course prepares you for exam SC-401 for the Microsoft Certified: Information Security Administrator Associate certification. The exam and its fees are included only if your offer confirms this. The certificate comes from Microsoft, not NextNowa. This is not an official Microsoft course.