Dernier examen Microsoft SC-400 Le contenu du test des meilleures pratiques

Exam SC-400: Microsoft Information Protection Administrator – Skills Measured

Profil d'audience

The Information Protection Administrator plans and implements controls that meet organizational compliance needs. This person is responsible for translating requirements and compliance controls into technical implementation. They assist organizational control owners to become and stay compliant.

They work with information technology (IL) personnel, business application owners, ressources humaines, and legal stakeholders to implement technology that supports policies and controls necessary to sufficiently address regulatory requirements for their organization. They also work with the compliance and security leadership such as a Chief Compliance Officer and Security Officer to evaluate the full breadth of associated enterprise risk and partner to develop those policies.

This person defines applicable requirements and tests IT processes and operations against those policies and controls. Ils sont responsables de la création de politiques et de règles de classification du contenu., prévention contre la perte de données, la gouvernance, et protection.

Compétences mesurées

REMARQUE: Les puces qui apparaissent sous chacune des compétences mesurées visent à illustrer comment nous évaluons cette compétence. Cette liste n'est ni définitive ni exhaustive.

REMARQUE: La plupart des questions portent sur les fonctionnalités de disponibilité générale. (Géorgie). L'examen peut contenir des questions sur les fonctionnalités d'aperçu si ces fonctionnalités sont couramment utilisées..

Mettre en œuvre la protection des informations (35-40%)

Créer et gérer des types d'informations sensibles

• select a sensitive information type based on an organization’s requirements

• create and manage custom sensitive information types

• create custom sensitive information types with exact data match

• implement document fingerprinting

• create a keyword dictionary

Créer et gérer des classificateurs pouvant être entraînés

• identify when to use trainable classifiers

• create a trainable classifier

• verify a trainable classifier is performing properly

• retrain a classifier

Mettre en œuvre et gérer les étiquettes de sensibilité

• identify roles and permissions for administering sensitivity labels

• create sensitivity labels

• configure and manage sensitivity label policies

• apply sensitivity labels to Microsoft Teams, Microsoft 365 groupes, and SharePoint sites

• configure and publish automatic labeling policies (excluding MCAS scenarios)

• monitor label usage by using label analytics

• apply bulk classification to on-premises data by using the AIP unified labelling scanner

• manage protection settings and marking for applied sensitivity labels

• apply protections and restrictions to email including content marking, usage, permission, encryption, expiration, etc.

• apply protections and restrictions to files including content marking, usage, permission, encryption, expiration, etc.

Planifier et mettre en œuvre le cryptage des messages électroniques

• define requirements for implementing Office 365 Message Encryption

• implement Office 365 Advanced Message Encryption

Mettre en œuvre la prévention contre la perte de données (30-35%)

Créer et configurer des politiques de prévention contre la perte de données

• recommend a data loss prevention solution for an organization

• configure data loss prevention for policy precedence

• configure policies for Microsoft Exchange email

• configure policies for Microsoft SharePoint sites

• configure policies for Microsoft OneDrive accounts

• configure policies for Microsoft Teams chat and channel messages

• integrate Microsoft Cloud App Security (MCAS) with Microsoft Information Protection

• configure policies in Microsoft Cloud App Security (MCAS)

• implement data loss prevention policies in test mode

Mettre en œuvre et surveiller la prévention contre la perte de données Microsoft Endpoint

• configure policies for endpoints

• configure Endpoint data loss prevention settings

• recommend configurations that enable devices for Endpoint data loss prevention policies

• monitor endpoint activities

Gérer et surveiller les politiques et activités de prévention contre la perte de données

• manage and respond to data loss prevention policy violations

• review and analyze data loss prevention reports

• manage permissions for data loss prevention reports

• manage data loss prevention violations in Microsoft Cloud App Security (MCAS)

Mettre en œuvre la gouvernance de l’information (25-30%)

Configurer les politiques et les étiquettes de rétention

• create and apply retention labels

• create and apply retention label policies

• configure and publish auto-apply label policies

Gérer la conservation des données dans Microsoft 365

• create and apply retention policies in Microsoft SharePoint and OneDrive

• create and apply retention policies in Microsoft Teams

• recover content in Microsoft Teams, SharePoint, and OneDrive

• recover content in Microsoft Exchange

• implement retention policies and tags in Microsoft Exchange

• apply mailbox holds in Microsoft Exchange

• implement Microsoft Exchange Online archiving policies

Implémenter la gestion des enregistrements dans Microsoft 365

• configure labels for records management

• manage and migrate retention requirements with a file plan

• configure automatic retention using File Plan descriptors

• classify records using retention labels and policies

• implement in-place records management in Microsoft SharePoint

• configure event-based retention

• manage disposition of records