Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Top Microsoft Exam Prep Training Provider

Information Security Administrator (SC-401)

The Purview credential, for the people who have to prove where the data went. Three domains, evenly weighted.

Verified for 2026 SC-401 Exam
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

250,000+

Alumni Worldwide

21+ Years

Excellence

Proven by 50,000+. Backed by our Free Retake Guarantee

Microsoft Information Security. Certified in Four Days.

4 days built for compliance administrators, data protection officers and Microsoft 365 admins who own labelling, DLP, retention and insider risk. You leave exam-ready, not just trained.

Program Abstract

REF: SC-401 3
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 4

The Information Security Administrator Boot Camp

SC-401 replaced SC-400 as Microsoft’s data protection credential, and it sits squarely on Microsoft Purview. This four-day boot camp covers all three domains: implementing information protection, data loss prevention and retention, and managing risks, alerts and activities. Sensitivity labels, DLP policies and insider risk management, built in hands-on labs every day. You finish exam-ready.

Official Microsoft Courseware.

Official Microsoft Courseware, plus Training Camp’s own exam prep built on top of it. You get the vendor’s material and our exam-day method.

Exam Fee Included.

$165 exam voucher included with your enrollment. No surprise costs, no separate booking.

Exam Prep Built Into the Week

Practice questions mapped to Microsoft’s 3 domains, instructor-led review of every answer choice, and a readiness check before you sit.

·
Training materials including official courseware and study guides
Practitioner Led
Instructors are working security professionals, not just trainers.

"I don't teach from a textbook. I teach what happens in the SOC when the alert fires."

Jeff Porch

VP Ed. Services • CISSP, CISM CISSP: Certified Information Systems Security Professional. CISM: Certified Information Security Manager.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Exam Voucher Included

Your SC-401 Exam Voucher Is Included

The $165 SC-401 voucher is part of the price rather than an add-on, so nothing is owed on test day whether you sit it in class or later.

Free Retake

Backed by Our Free Retake Guarantee

If you do not pass SC-401 on the first attempt, your retake is covered, so a single bad morning does not cost you the certification.

Hands-On Labs

Hosted Purview Tenants, Provisioned

Hosted Microsoft Purview tenants with sensitivity labels, DLP policies and insider risk management already provisioned and waiting.

Domain-Mapped Practice

Practice Mapped to the SC-401 Domains

Questions tied to each of the three published SC-401 domains rather than a generic pool, so gaps in data protection show up early.

180 Days of Support

180 Days of One-to-One Instructor Help

Your instructor stays reachable for a full 180 days after class, which is exactly when the SC-401 questions that actually matter turn up.

Exams Taken On Site

SC-401 Replaces the Retired SC-400

SC-401 replaced SC-400 as Microsoft’s information protection credential, and the course teaches the current outline with nothing carried over.

Microsoft Information Security Administrator Boot Camp (SC-401)

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    Microsoft Information Security Administrator Boot Camp (SC-401) Course Outline
    Outline

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    Request Info

    MODULE_ID: PREP

    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    Pre-course materials access
    L.prep.1
    Foundation concepts review
    L.prep.2
    Baseline self-assessment
    L.prep.3

    MODULE_ID: MS-SC401-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    Day 1

    Translate Sensitive Information Requirements Into Sensitive Info Types
    L.01.1
    Create Custom Sensitive Info Types and Document Fingerprints
    L.01.2
    Build Exact Data Match and Trainable Classifiers
    L.01.3
    Configure OCR Support for Sensitive Info Types
    L.01.4
    Define Sensitivity Labels for Items and Containers
    L.01.5
    Configure Protection Settings, Content Marking and Publishing Policies
    L.01.6
    Monitor Label Usage With Data Explorer and Content Explorer
    L.01.7
    Configure Auto-Labeling Policies for Sensitivity Labels
    L.01.8
    Lab: Label Teams, Microsoft 365 Groups, SharePoint and Power BI
    L.01.9
    Apply Sensitivity Labels Using Microsoft Defender for Cloud Apps
    L.01.10
    Lab: Deploy the Purview Information Protection Client and Scanner
    L.01.11
    Design Microsoft Purview Message Encryption and Advanced Message Encryption
    L.01.12
    Practice Questions and Wrong-Answer Walkthrough: Information Protection
    L.01.13

    MODULE_ID: MS-SC401-02

    Live Training QS: ~6
    DAY 2
    Critical Path

    Day 2

    Design DLP Policies From Organizational Requirements
    L.02.1
    Implement Roles and Permissions for Data Loss Prevention
    L.02.2
    Create and Manage DLP Policies Across Workloads
    L.02.3
    Configure DLP Policies for Adaptive Protection
    L.02.4
    Interpret DLP Policy and Rule Precedence
    L.02.5
    Create Defender for Cloud Apps File Policies From DLP
    L.02.6
    Specify Endpoint DLP Device Requirements and Extensions
    L.02.7
    Lab: Configure Advanced DLP Rules and Endpoint DLP Settings
    L.02.8
    Lab: Configure Just-in-Time Protection and Monitor Endpoint Activities
    L.02.9
    Plan Retention and Disposition With Retention Labels
    L.02.10
    Lab: Create Adaptive Policy Scopes and Retention Policies
    L.02.11
    Publish and Auto-Apply Retention Labels and Use Policy Lookup
    L.02.12
    Recover Retained Content in Microsoft 365
    L.02.13
    Practice Questions and Wrong-Answer Walkthrough: DLP and Retention
    L.02.14

    MODULE_ID: MS-SC401-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Day 3

    Implement Insider Risk Management Roles, Connectors and Settings
    L.03.1
    Integrate Insider Risk Management With Defender for Endpoint
    L.03.2
    Select Policy Templates and Configure Policy Indicators
    L.03.3
    Manage Forensic Evidence and Adaptive Protection Risk Levels
    L.03.4
    Manage Insider Risk Alerts, Cases and Notice Templates
    L.03.5
    Investigate Activities With Microsoft Purview Audit and Activity Explorer
    L.03.6
    Respond to Purview Alerts in Microsoft Defender XDR
    L.03.7
    Lab: Respond to DLP and Defender for Cloud Apps Alerts
    L.03.8
    Lab: Configure Audit Retention Policies and Run eDiscovery Searches
    L.03.9
    Implement Purview Controls for Content Used by AI Services
    L.03.10
    Lab: Implement DSPM for AI Prerequisites, Roles and Policies
    L.03.11
    Monitor Activities in DSPM for AI
    L.03.12
    Practice Questions and Wrong-Answer Walkthrough: Risks and Alerts
    L.03.13

    MODULE_ID: MS-SC401-04

    Live Training QS: ~7
    DAY 4
    Critical Path

    Day 4

    Sit a Timed Full-Length SC-401 Practice Exam
    L.04.1
    Question-by-Question Review of Information Protection Items
    L.04.2
    Question-by-Question Review of DLP and Retention Items
    L.04.3
    Question-by-Question Review of Risks and Alerts Items
    L.04.4
    Identify Weak Domains From Practice Exam Results
    L.04.5
    Re-Teach Weak Domains Identified in the Morning
    L.04.6
    Lab: Rebuild Labels, DLP and Insider Risk Scenarios on Demand
    L.04.7
    Policy Precedence Scenarios Across Labels, DLP and Retention
    L.04.8
    Exam Strategy for Case Studies and Timed Sections
    L.04.9
    Exam Readiness Review and Instructor Sign-Off
    L.04.10
    Exam: SC-401
    L.04.11

    MODULE_ID: POST

    Live Training QS: ~7
    AFTER CLASS
    Critical Path

    After Class

    COURSE PROGRESS Day 0 of 4
    DoD Cyber Workforce Framework

    Master the SC-401 Exam 4 Days to Certified

    3 skill areas, taught in exam weight order, with labs and a readiness review before you sit.

    Vulnerability Management Security & Risk Management Communication & Network Security Incident Response Security Assessment & Testing Asset Security Network Protocols Security Architecture Vulnerability Management Security & Risk Management Communication & Network Security Incident Response Security Assessment & Testing Asset Security Network Protocols Security Architecture
    Software Development Security Business Continuity Cryptography Governance & Compliance Security Operations Risk Assessment Access Control Models Identity & Access Management Software Development Security Business Continuity Cryptography Governance & Compliance Security Operations Risk Assessment Access Control Models Identity & Access Management
    DoD 8140 Requirements

    Beyond the Cert: Built for the Job

    Foundational qualification The certification you earn with us
    Residential qualification Hands-on labs prep you for the on-the-job readiness DoD 8140 requires within 12 months
    Continuous professional development CPE-eligible training to maintain qualification long after

    The credential, the capability, and the continued readiness — all in one boot camp.

    Frequently Asked Questions

    SC-401 Boot Camp Questions, Answered
    SC-401

    Real questions from real professionals who passed.
    Here's how we answer them.

    Passing SC-401 earns Microsoft Certified: Information Security Administrator Associate. The exam title is Administering Information Security in Microsoft 365.

    4 days of live, instructor-led SC-401 training from Official Microsoft Courseware, delivered online or in person. Class runs 9am to 5pm, the labs are hosted so you need only a laptop, and test day is scheduled for Thursday.

    Yes. Your $165 SC-401 exam voucher is included with your enrollment. Nothing further is owed on test day, and the voucher stays valid if you would rather book the exam later.

    SC-401 asks between 40 and 60 questions, and you get 100 minutes. Passing is a scaled score of 700 out of 1000. You sit it at a Pearson VUE test center or online with a proctor, whichever you prefer.

    The skills outline is: Implement information protection (30-35%); Implement data loss prevention and retention (30-35%); Manage risks, alerts, and activities (30-35%).

    Compliance administrators, data protection officers and Microsoft 365 admins who own labelling, DLP, retention and insider risk. If you are unsure whether your background fits, our advisors will talk it through with you before you book.

    Microsoft does not enforce a prerequisite, but SC-401 is written at Associate level and assumes hands-on experience. Talk to us if you are unsure whether you are ready.

    Your retake is covered by our Free Retake Guarantee. You return for the full SC-401 course at no cost and sit the exam again, keeping 180 days of instructor support to work through whatever tripped you up.

    Yes. We run private cohorts online or at your site, and can adjust the agenda to your environment. Team training details are here. Private SC-401 cohorts run to your own schedule, and the agenda can lean toward the parts of the blueprint your team actually uses.

    Many of our courses are approved. Eligibility for the SC-401 boot camp depends on the program and your location, so check our military and veterans page or contact us before enrolling.

    SC-401 replaced SC-400 as Microsoft’s data protection credential, and data governance is now a board-level concern rather than a compliance footnote.

    The breadth of Microsoft Purview is the difficulty. Classification, DLP, retention and insider risk each behave differently, and the exam moves between them freely.

    Information protection administrator, compliance administrator, and data security analysts who own Purview across a Microsoft 365 tenant.

    Get the Free
    MS-SC401 Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    SC-401 Articles and Exam News
    Articles and Exam News

    Exam changes, study guidance and career context for SC-401, from our instructors.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    ★★★★★

    Microsoft Azure certification exams are no joke! Chad was on his “A” game helping me get thru this class.

    RM
    Roy** Mcc*** F**EX
    ★★★★★

    We chose Training Camp because we could not find any other provider that offered all the tools we needed in one program. The Azure training we received was excep...

    Continue Your Journey

    Information Security Related Courses

    Advance your career with these recommended certifications

    Featured on