JITA Learning · Microsoft · Field Guide
SC-401 · Administering Information Security in Microsoft 365
Build working judgment for Microsoft Purview information security.
What you should expect
Build working judgment for Microsoft Purview information security.
This Field Guide develops a working mental model of Microsoft Purview information security. You will connect classify and protect information with sensitivity labels and information-protection policies, design DLP across Microsoft 365 workloads and endpoints, manage insider-risk, communication-compliance, and data-risk investigation boundaries, and configure retention, records, lifecycle, eDiscovery, and audit capabilities. You are not just memorizing feature names; you are learning what owns the requirement, what can fail, and how to verify the outcome.
What you will learn
- classify and protect information with sensitivity labels and information-protection policies
- design DLP across Microsoft 365 workloads and endpoints
- manage insider-risk, communication-compliance, and data-risk investigation boundaries
- configure retention, records, lifecycle, eDiscovery, and audit capabilities
- recognize why one technically plausible alternative loses under the stated requirement
- apply Changed Fact reasoning and verify the design or implementation through operational evidence
Decision skills you will practice
- identify the governing requirement
- compare the nearest plausible alternative
- apply Changed Fact reasoning
- trace prerequisites, dependencies, and failure paths
- verify configured state, effective state, runtime outcome, and negative-path evidence
Who this is for
information security and compliance practitioners protecting Microsoft 365 data with classification, DLP, risk, audit, records, and investigation controls
Use this when you need to learn the architecture, mechanics, dependencies, tradeoffs, failure paths, and verification logic behind the certification.
Decisions you will learn to distinguish
- sensitivity label vs DLP policy
- retention/records requirement vs eDiscovery or audit requirement
- user-risk signal vs content-protection policy
Why JITA is different
Microsoft explains the platform. JITA teaches the decision.
Microsoft Learn explains the services, features, and documented behavior that support Microsoft Purview information security. JITA connects those capabilities into decisions: what owns the requirement, what the nearest alternative is, what changes when one fact changes, and what evidence proves the implementation worked.
How to choose:
Use the Field Guide to build understanding. Use the Exam Preparation Guide to test whether that understanding survives exam-style decisions.