CertBlaze

Microsoft Exam Syllabus

SC-400 syllabus, skills measured, and exam topics

The SC-400 exam measures Implement information protection, Implement DLP, and Implement data lifecycle and records management. Use this page to review the current official syllabus, major domains, and source links before exam day.

Open the practice page

Skills measured by domain

Use the weighting table to decide where to spend the most study time.

Domain Weight
Implement information protection 25–30%
Implement DLP 15–20%
Implement data lifecycle and records management 10–15%
Monitor and investigate data and activities by using Microsoft Purview 15–20%
Manage insider and privacy risk in Microsoft 365 15–20%

Detailed outline

Scan each section as a working study checklist instead of one long wall of text.

Implement information protection (25–30%)

  • Identify sensitive information requirements for an organization's data
  • Translate sensitive information requirements into built-in or custom sensitive info types
  • Create and manage custom sensitive info types
  • Create and manage exact data match (EDM) classifiers
  • Implement document fingerprinting
  • Identify when to use trainable classifiers
  • Design and create a trainable classifier
  • Test a trainable classifier
  • Retrain a trainable classifier
  • Implement roles and permissions for administering sensitivity labels
  • Define and create sensitivity labels
  • Configure and manage sensitivity label policies

Implement DLP (15–20%)

  • Design DLP policies based on an organization’s requirements
  • Configure permissions for DLP
  • Create and manage DLP policies
  • Interpret policy and rule precedence in DLP
  • Configure a Microsoft Defender for Cloud Apps file policy to use DLP policies
  • Configure advanced DLP rules for devices in DLP policies
  • Configure Endpoint DLP settings
  • Recommend a deployment method for device onboarding
  • Identify endpoint requirements for device onboarding
  • Monitor endpoint activities
  • Implement the Microsoft Purview Extension
  • Analyze DLP reports

Implement data lifecycle and records management (10–15%)

  • Plan for information retention and disposition by using retention labels
  • Create retention labels for data lifecycle management
  • Configure and manage adaptive scopes
  • Configure a retention label policy to publish labels
  • Configure a retention label policy to auto-apply labels
  • Interpret the results of policy precedence, including using Policy lookup
  • Create and apply retention policies for SharePoint and OneDrive
  • Create and apply retention policies for Microsoft 365 groups
  • Create and apply retention policies for Teams
  • Create and apply retention policies for Yammer
  • Create and apply retention policies for Exchange Online
  • Apply mailbox holds in Exchange Online

Monitor and investigate data and activities by using Microsoft Purview (15–20%)

  • Plan for regulatory compliance in Microsoft 365
  • Create and manage assessments
  • Create and modify custom templates
  • Interpret and manage improvement actions
  • Create and manage alert policies for assessments
  • Choose between eDiscovery (Standard) and eDiscovery (Premium) based on an organization’s requirements
  • Plan and implement eDiscovery
  • Delegate permissions to use eDiscovery and Content search
  • Perform searches and respond to results from eDiscovery
  • Manage eDiscovery cases
  • Perform searches by using Content search
  • Choose between Audit (Standard) and Audit (Premium) based on an organization’s requirements

Manage insider and privacy risk in Microsoft 365 (15–20%)

  • Plan for communication compliance
  • Create and manage communication compliance policies
  • Investigate and remediate communication compliance alerts and reports
  • Plan for insider risk management
  • Create and manage insider risk management policies
  • Investigate and remediate insider risk activities, alerts, and reports
  • Manage insider risk cases
  • Manage forensic evidence settings
  • Manage notice templates
  • Plan for IBs
  • Create and manage IB segments and policies
  • Configure Teams, SharePoint, and OneDrive to enforce IBs, including setting barrier modes

Implement information protection (25–30%)

  • Identify sensitive information requirements for an organization's data
  • Translate sensitive information requirements into built-in or custom sensitive info types
  • Create and manage custom sensitive info types
  • Create and manage exact data match (EDM) classifiers
  • Implement document fingerprinting
  • Identify when to use trainable classifiers
  • Design and create a trainable classifier
  • Test a trainable classifier
  • Retrain a trainable classifier
  • Implement roles and permissions for administering sensitivity labels
  • Define and create sensitivity labels
  • Configure and manage sensitivity label policies

Implement DLP (15–20%)

  • Design DLP policies based on an organization’s requirements
  • Configure permissions for DLP
  • Create and manage DLP policies
  • Interpret policy and rule precedence in DLP
  • Configure a Microsoft Defender for Cloud Apps file policy to use DLP policies
  • Configure advanced DLP rules for devices in DLP policies
  • Configure Endpoint DLP settings
  • Recommend a deployment method for device onboarding
  • Identify endpoint requirements for device onboarding
  • Monitor endpoint activities
  • Implement the Microsoft Purview Extension
  • Analyze DLP reports

Implement data lifecycle and records management (10–15%)

  • Plan for information retention and disposition by using retention labels
  • Create retention labels for data lifecycle management
  • Configure and manage adaptive scopes
  • Configure a retention label policy to publish labels
  • Configure a retention label policy to auto-apply labels
  • Interpret the results of policy precedence, including using Policy lookup
  • Create and apply retention policies for SharePoint Online and OneDrive
  • Create and apply retention policies for Microsoft 365 groups
  • Create and apply retention policies for Teams
  • Create and apply retention policies for Yammer
  • Create and apply retention policies for Exchange Online
  • Apply mailbox holds in Exchange Online