Administering Information Security in Microsoft 365

The SC-401 certification validates skills in administering information security using Microsoft Purview and related Microsoft 365 services. It covers implementing data classification, sensitivity labels, data loss prevention (DLP) policies, information barriers, retention policies, records management, insider risk management, and eDiscovery solutions. This exam replaces the retired SC-400 with updated content reflecting current capabilities.

This certification is designed for information security administrators who protect sensitive data across Microsoft 365 collaboration environments. Candidates should have experience implementing data protection strategies using Microsoft Purview, including configuring DLP policies, sensitivity labels, retention, and compliance solutions for organizations subject to regulatory requirements.

The exam consists of 40–60 questions to be completed in approximately 100 minutes (120 minutes if labs are included). Question types include multiple-choice, multiple-select, drag-and-drop, and hot area formats. Questions are scenario-based, presenting data protection requirements and asking you to configure the appropriate Microsoft Purview solutions. Expect detailed questions about DLP rule configuration, sensitivity label policies, and insider risk indicators.

This exam requires detailed knowledge of Microsoft Purview capabilities. Candidates with general Microsoft 365 administration experience who haven't deeply configured DLP policies, sensitivity labels, and compliance features often struggle with specifics.

Delivered via Pearson VUE online or at testing centers. Available in English. The certification is valid for 1 year with a free renewal assessment on Microsoft Learn. This exam replaced SC-400 in early 2025.