Practice
Learn at your own pace. Answer questions one at a time with instant feedback and explanations.
Start practiceMicrosoft Certified: Information Security Administrator Associate
Information security administrator certification for Microsoft Purview, information protection, DLP, retention, insider risk, alerts, and AI data protection.
Mock exam
Simulate the real thing. Take a timed, full-length test and review your score and weak areas.
Sign up to startStudy your way: beyond Practice and Mock exam, choose adaptive, hard mode, ready review, objective coverage, or retry-your-misses — and set your own question count, timer, and pass mark.
About this exam
SC-401 validates the ability to administer information security for sensitive data using Microsoft Purview and related Microsoft 365 security services.
Who should take this exam
Information security administrators who implement protection, DLP, retention, insider risk, alerting, activity investigation, and controls for data used by AI services.
Career benefits
Demonstrates modern Microsoft Purview and information protection skills for compliance, data security, Microsoft 365, and AI data protection roles.
How to prepare
Use the official SC-401 certification page and study guide, then practice with Microsoft Purview classification, sensitivity labels, DLP, endpoint DLP, retention, insider risk, audit, alerts, and DSPM for AI.
Quick facts
Exam costPrice based on the country or region in which the exam is proctored.
Valid for1 year; renewable by Microsoft Learn assessment
Length100 minutes
Passing score700
FormatProctored Microsoft certification exam; multiple question types and possible interactive components
Practice questions125
Objectives3
Blueprint as ofApril 27, 2026
Official pageView
What's covered
1. Implement information protection
30–35%- 1.1 Implement and manage data classification
- 1.2 Implement and manage sensitivity labels in Microsoft Purview
- 1.3 Implement information protection for Windows, file shares, and Exchange
2. Implement data loss prevention and retention
30–35%- 2.1 Create and configure data loss prevention policies
- 2.2 Implement and monitor Microsoft Purview Endpoint DLP
- 2.3 Implement and manage retention
3. Manage risks, alerts, and activities
30–35%- 3.1 Implement and manage Microsoft Purview Insider Risk Management
- 3.2 Manage information security alerts and activities
- 3.3 Protect data used by AI services
Frequently asked questions
Are these real exam questions?
No. These are original practice questions written to match the exam objectives, each with an explanation so you actually learn the material — not exam dumps.
How does practice mode work?
You answer questions one at a time with instant feedback and explanations. Over time the app adapts, prioritizing the objectives and questions you struggle with most.
What is a mock exam?
A timed, full-length simulation that holds feedback until the end, then shows your score, pass/fail result, and a breakdown by objective.
Can I customize how I study?
Yes. Pick the study mode that fits — adaptive practice, hard mode, ready-for-review, objective coverage, or retrying questions you've missed — and set your own question count, timer, and passing score for each session.
Do I need an account?
You can try free questions for this exam without signing in. Create a free account to save your progress, track weak objectives, and unlock the full question bank.