Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Microsoft
Exam Format
120 min
40-60
700
Associate
Registration
$165 USD
Pearson VUE or online proctoring
English, Japanese, Chinese (Simplified), Korean +9 more
Validity
2 years
Pass renewal assessment on Microsoft Learn (free); Pass another qualifying exam; Earn a higher-level certification
SC-400 Exam Topics and Domains
SC-400 is organized into 5 weighted domains. Expect to work with Microsoft Purview, Exchange Online, Microsoft Purview Insider Risk Management, SharePoint, and more.
1
Implement information protection
27.5%
Create and manage sensitive info types
Identify sensitive information requirementsCustom sensitive info typesExact data match (EDM) classifiersDocument fingerprinting
- Identify sensitive information requirements for an organization's data
- Translate sensitive information requirements into built-in or custom sensitive info types
- Create and manage custom sensitive info types
- Create and manage exact data match (EDM) classifiers
- Implement document fingerprinting
Create and manage trainable classifiers
Trainable classifier use casesDesign and create trainable classifiersClassifier maintenance
- Identify when to use trainable classifiers
- Design and create a trainable classifier
- Test a trainable classifier
- Retrain a trainable classifier
Implement and manage sensitivity labels
Sensitivity label administrationLabel configurationAuto-labeling policiesMonitoring and analyticsOn-premises scanning
- Implement roles and permissions for administering sensitivity labels
- Define and create sensitivity labels
- Configure and manage sensitivity label policies
- Configure auto-labeling policies for sensitivity labels
- Monitor data classification and label usage by using Content explorer, Activity explorer, and audit search
- Apply bulk classification to on-premises data by using the Microsoft Purview Information Protection scanner
- Manage protection settings and marking for applied sensitivity labels
Design and implement encryption for email messages
Email encryption methodsMessage Encryption implementationAdvanced Message Encryption
- Design an email encryption solution based on methods available in Microsoft 365
- Implement Microsoft Purview Message Encryption
- Implement Microsoft Purview Advanced Message Encryption
2
Implement DLP
17.5%
Create and configure DLP policies
DLP policy designDLP permissions and rolesPolicy and rule precedenceCloud Apps integration
- Design DLP policies based on an organization's requirements
- Configure permissions for DLP
- Create and manage DLP policies
- Interpret policy and rule precedence in DLP
- Configure a Microsoft Defender for Cloud Apps file policy to use DLP policies
Implement and monitor Endpoint DLP
Endpoint DLP configurationDevice onboardingEndpoint monitoringBrowser extension
- Configure advanced DLP rules for devices in DLP policies
- Configure Endpoint DLP settings
- Recommend a deployment method for device onboarding
- Identify endpoint requirements for device onboarding
- Monitor endpoint activities
- Implement the Microsoft Purview Extension
Monitor and manage DLP activities
DLP reportingActivity investigationAlert remediation
- Analyze DLP reports
- Analyze DLP activities by using Activity explorer
- Remediate DLP alerts in the Microsoft Purview compliance portal
- Remediate DLP alerts generated by Defender for Cloud Apps
3
Implement data lifecycle and records management
12.5%
Retain and delete data by using retention labels
Retention planningRetention label creationAdaptive scopesLabel policiesPolicy lookup
- Plan for information retention and disposition by using retention labels
- Create retention labels for data lifecycle management
- Configure and manage adaptive scopes
- Configure a retention label policy to publish labels
- Configure a retention label policy to auto-apply labels
- Interpret the results of policy precedence, including using Policy lookup
Manage data retention in Microsoft 365 workloads
SharePoint and OneDrive retentionMicrosoft 365 Groups retentionTeams retentionYammer retentionExchange Online retentionMailbox holdsPreservation locksContent recovery
- Create and apply retention policies for SharePoint and OneDrive
- Create and apply retention policies for Microsoft 365 groups
- Create and apply retention policies for Teams
- Create and apply retention policies for Yammer
- Create and apply retention policies for Exchange Online
- Apply mailbox holds in Exchange Online
- Implement Exchange Online archiving policies
- Configure preservation locks for retention policies and retention label policies
- Recover retained content in Microsoft 365
Implement Microsoft Purview records management
Records management labelsFile plan managementRecord classificationEvent-based retentionDisposition managementRecords management settings
- Create and configure retention labels for records management
- Manage retention labels by using a file plan, including file plan descriptors
- Classify records by using retention labels and retention label policies
- Manage event-based retention
- Manage the disposition of content in records management
- Configure records management settings, including retention label settings and disposition settings
4
Monitor and investigate data and activities by using Microsoft Purview
17.5%
Plan and manage regulatory requirements by using Microsoft Purview Compliance Manager
Regulatory compliance planningAssessment managementCustom templatesImprovement actionsAlert policies
- Plan for regulatory compliance in Microsoft 365
- Create and manage assessments
- Create and modify custom templates
- Interpret and manage improvement actions
- Create and manage alert policies for assessments
Plan and manage eDiscovery and Content search
eDiscovery planningeDiscovery implementationPermission delegationSearch and collectionCase managementContent search
- Choose between eDiscovery (Standard) and eDiscovery (Premium) based on an organization's requirements
- Plan and implement eDiscovery
- Delegate permissions to use eDiscovery and Content search
- Perform searches and respond to results from eDiscovery
- Manage eDiscovery cases
- Perform searches by using Content search
Manage and analyze audit logs and reports in Microsoft Purview
Audit planningAudit configurationAudit investigationCompliance reportingAlert configurationAudit retention policies
- Choose between Audit (Standard) and Audit (Premium) based on an organization's requirements
- Plan for and configure auditing
- Investigate activities by using the unified audit log
- Review and interpret compliance reports and dashboards
- Configure alert policies
- Configure audit retention policies
5
Manage insider and privacy risk in Microsoft 365
17.5%
Implement and manage Microsoft Purview Communication Compliance
Communication compliance planningPolicy creation and managementAlert investigation and remediation
- Plan for communication compliance
- Create and manage communication compliance policies
- Investigate and remediate communication compliance alerts and reports
Implement and manage Microsoft Purview Insider Risk Management
Insider risk planningInsider risk policiesAlert and activity investigationCase managementForensic evidenceNotice templates
- Plan for insider risk management
- Create and manage insider risk management policies
- Investigate and remediate insider risk activities, alerts, and reports
- Manage insider risk cases
- Manage forensic evidence settings
- Manage notice templates
Implement and manage Microsoft Purview Information Barriers (IBs)
Information Barriers planningIB segments and policiesWorkload configurationIB troubleshooting
- Plan for IBs
- Create and manage IB segments and policies
- Configure Teams, SharePoint, and OneDrive to enforce IBs, including setting barrier modes
- Investigate issues with IB policies
Implement and manage privacy requirements by using Microsoft Priva
Privacy risk management configurationPrivacy Risk Management policiesPersonal data monitoringAlert evaluation and remediationSubject rights requests
- Configure and maintain privacy risk management
- Create and manage Privacy Risk Management policies
- Identify and monitor potential risks involving personal data
- Evaluate and remediate alerts and issues
- Implement and manage subject rights requests
How do I earn this certification?
Passing SC-400 earns the Microsoft Certified: Information Protection and Compliance Administrator Associate certification.
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for SC-400 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- RETIRED
- Last content update: 2023-08-22
- Announcement date: 2024-01-15
Updates
- Microsoft Purview Data Loss Prevention Latest Enhanced Endpoint DLP features likely in SC-401 • Release date: 2024-07-01
- Microsoft Priva 2.0 Privacy management now core component • Release date: 2024-06-01
- Communication Compliance Latest AI-powered detection capabilities expanded • Release date: 2024-05-01
- Microsoft Purview Information Barriers v3 New barrier modes and SharePoint integration • Release date: 2024-04-15
Who should take this exam?
This exam is typically taken by Information Protection Administrators and Compliance Administrators.
- Experience with Microsoft 365 services
- Knowledge of Microsoft 365 Apps
- Experience with Microsoft Exchange Online
- Experience with Microsoft SharePoint Online
- Experience with Microsoft OneDrive
- Experience with Microsoft Teams
- Familiarity with PowerShell
- Understanding of compliance and risk management concepts
- Knowledge of data governance principles
What jobs can I get with this?
Information Protection Administrator
Compliance Administrator
Security Administrator
Data Protection Officer
Governance Risk and Compliance Analyst