Microsoft's information-protection credential — built around Microsoft Purview, for the administrator who secures the data itself rather than identities (SC-300) or the security operations center (SC-200).
SC-401 validates the skills organizations need most as data sprawls across Microsoft 365 and Copilot: applying sensitivity labels and encryption to protect information wherever it lives, building data loss prevention and retention policies that actually hold up under audit, and managing the risks, alerts, and activities that catch a leak before it becomes a breach. It's the credential for the compliance or security admin who owns Microsoft Purview day to day — the person legal, HR, and security all call when sensitive data needs to be found, classified, and controlled. As Microsoft pushes AI deeper into the Microsoft 365 stack, information protection has become the seat that decides what Copilot can see, making this one of the fastest-growing specializations inside Microsoft's security certification family.
This course builds toward: Security Architect, Cloud Security Engineer
See all career paths →Self-paced access, AI Coach on every lesson, full-length practice exams, and a free course retake if you complete the readiness gate and still don't pass your exam on the first attempt. Exam registration and voucher are purchased separately, directly through the certifying body.
See the full curriculum100% self-paced online — study on your schedule, no bootcamp seat to book.
Training a whole team on SC-401? Fund a Training Bank account for any amount, then assign any course to any employee — self-serve, published discount tiers, no sales call.
Set up your team account
