What is the Microsoft Information Security Administrator (SC-401) course fee at RST Forum?

Call or WhatsApp +91 91672 24466 for the current fee. It is quoted per batch and covers the lectures, the lab tenant and the recordings.

How long is the course?

40 hours of live instruction plus lab time, in weekday or weekend batches.

Is this the same as the old SC-400?

It is the successor. SC-400 was Information Protection and Compliance Administrator; SC-401 is Information Security Administrator, and Microsoft rebuilt the blueprint around Purview as it stands now - including insider risk management and adaptive protection, which SC-400 barely touched.

Do I need a security background?

No, but you do need to be comfortable administering Microsoft 365 - Exchange Online, SharePoint and Teams at admin-centre level. If you have done SC-300 or MD-102 first, you will find this straightforward.

Which exam does this prepare me for?

Exam SC-401: Administering Information Security in Microsoft 365, which awards Microsoft Certified: Information Security Administrator Associate.

Does insider risk management raise legal questions in India?

It can, which is why we teach the privacy controls alongside the feature rather than after it - pseudonymisation, scoped administrators, and what you should document before you switch a policy on. We cover what the Digital Personal Data Protection Act expects of an employer monitoring staff activity. That said, we teach the product, not the law: take your policy past your own counsel before you deploy it.

Microsoft Information Security Administrator (SC-401)

Overview

Who should attend

Roles this leads to

Typical India salary

Information Security Administrator₹6-14 LPA
Microsoft Purview / Compliance Administrator₹6-15 LPA
Data Protection Analyst₹5-12 LPA
GRC Analyst₹6-14 LPA

Outcomes

Skills you'll gain

Microsoft Purview
Sensitivity labels
Data loss prevention
Information protection
Retention policies
Insider Risk Management
Microsoft Defender XDR
Data classification

Objectives

What you'll be able to do

The course objectives, as the vendor's own blueprint states them.

Classify data with sensitive information types, exact data match and trainable classifiers.
Design a sensitivity label taxonomy and publish it with the right scope and priority.
Apply encryption, content marking and auto-labelling to documents, email and containers.
Write data loss prevention policies for Exchange, SharePoint, OneDrive, Teams, endpoints and Edge.
Tune DLP with simulation mode, alerts and policy tips before enforcing anything.
Implement retention labels, retention policies, records management and defensible disposal.
Configure insider risk management policies, templates and the privacy controls around them.
Investigate alerts and activity in Purview and Microsoft Defender XDR, and report on them.

Included

What you get

Built on Microsoft Purview as it is actually deployed - simulation mode first, enforcement second
Sensitivity labels taken all the way to encryption, co-authoring and the labelling of containers
Data loss prevention across Exchange, SharePoint, Teams, endpoints and the browser
Insider risk management covered honestly, including the privacy controls that keep it lawful in India
One of the four live associate certifications left standing after MS-102 retires on 30 November 2026
Live instructor-led: classroom batches run at our mumbai campus and the same batch streams live-online across india.

Credential

Certification details

Microsoft Certified: Information Security Administrator AssociateSC-401

7 modules

Full syllabus

Every module below is taught live and practised hands-on — nothing here is a slide-only topic.

01

1 · Purview and the Compliance Portal

What Microsoft Purview covers, and what it does not
Licensing: what E3 gives you and what needs E5 or an add-on
Roles and role groups - least privilege for compliance staff
Content explorer, activity explorer and the data classification dashboard

02

2 · Classifying Data

Built-in sensitive information types, and writing your own with regex and keyword lists
Exact data match (EDM): schema, hashing and upload
Trainable classifiers - seeding, training and validating one
Document fingerprinting for forms and templates

03

3 · Sensitivity Labels

Designing a label taxonomy that people will actually use
Label scopes, sublabels, priority and label policies
Encryption, rights management and offline access
Content marking: headers, footers and watermarks
Auto-labelling: client-side vs service-side, and simulation first
Labels on containers - Teams, SharePoint sites and Microsoft 365 Groups

04

4 · Data Loss Prevention

Policy anatomy: locations, conditions, actions, user overrides and policy tips
DLP for Exchange, SharePoint, OneDrive and Teams
Endpoint DLP: onboarding devices, egress restrictions and unallowed apps
Browser DLP with Edge and the Purview extension
Simulation mode, alert tuning and the DLP alert dashboard
Adaptive protection - letting insider risk drive DLP strength

05

5 · Data Lifecycle and Records Management

Retention labels vs retention policies, and how conflicts resolve
Adaptive scopes
Records management: declaring records, the file plan and event-based retention
Disposition review and proving defensible disposal
Preservation hold and how retention interacts with eDiscovery

06

6 · Insider Risk Management

Policy templates: data theft by departing users, data leaks, security policy violations
Indicators, triggering events and the risk scoring model
Privacy by design: pseudonymisation, scoped admins and what the law expects in India
Alert triage, case management and forensic evidence
Communication compliance in outline

07

7 · Investigation and Reporting

Activity explorer as an investigation tool
Alerts in Microsoft Defender XDR and how Purview signals land there
Audit (Standard vs Premium) and the searches that matter
Building the report a regulator or an auditor will accept
Exam strategy and a full SC-401 blueprint walkthrough

12 labs

Hands-on labs

Structured labs on real equipment, with 24/7 lab-on-cloud access through Skillopia - our own lab platform.

Login to Skillopia

Hands-on labs

12

01

Write a custom sensitive information type for Indian PAN and Aadhaar formats, and validate it

02

Build and train a classifier, then measure it against a known document set

03

Publish a four-tier label taxonomy with encryption on the top two tiers

04

Configure auto-labelling in simulation, read the results, then turn it on

05

Label a Teams site and watch the container inherit the policy

06

Write a DLP policy for credit-card data across Exchange and SharePoint, in simulation first

07

Onboard a Windows endpoint and block an upload to unmanaged cloud storage

08

Tune a noisy DLP policy down to a usable alert volume

09

Apply retention with an adaptive scope and prove it holds against deletion

10

Run a disposition review end to end and export the evidence

11

Configure a departing-employee insider risk policy and triage a simulated alert

12

Reconstruct an exfiltration attempt from activity explorer and write the incident report

Answers

Frequently asked questions

What is the Microsoft Information Security Administrator (SC-401) course fee at RST Forum?: Call or WhatsApp +91 91672 24466 for the current fee. It is quoted per batch and covers the lectures, the lab tenant and the recordings.
How long is the course?: 40 hours of live instruction plus lab time, in weekday or weekend batches.
Is this the same as the old SC-400?: It is the successor. SC-400 was Information Protection and Compliance Administrator; SC-401 is Information Security Administrator, and Microsoft rebuilt the blueprint around Purview as it stands now - including insider risk management and adaptive protection, which SC-400 barely touched.
Do I need a security background?: No, but you do need to be comfortable administering Microsoft 365 - Exchange Online, SharePoint and Teams at admin-centre level. If you have done SC-300 or MD-102 first, you will find this straightforward.
Which exam does this prepare me for?: Exam SC-401: Administering Information Security in Microsoft 365, which awards Microsoft Certified: Information Security Administrator Associate.
Does insider risk management raise legal questions in India?: It can, which is why we teach the privacy controls alongside the feature rather than after it - pseudonymisation, scoped administrators, and what you should document before you switch a policy on. We cover what the Digital Personal Data Protection Act expects of an employer monitoring staff activity. That said, we teach the product, not the law: take your policy past your own counsel before you deploy it.

Microsoft Information Security Administrator (SC-401)

Who should attend

Skills you'll gain

What you'll be able to do

What you get

Certification details

Full syllabus

1 · Purview and the Compliance Portal

2 · Classifying Data

3 · Sensitivity Labels

4 · Data Loss Prevention

5 · Data Lifecycle and Records Management

6 · Insider Risk Management

7 · Investigation and Reporting

Hands-on labs

Hands-on labs

Write a custom sensitive information type for Indian PAN and Aadhaar formats, and validate it

Build and train a classifier, then measure it against a known document set

Publish a four-tier label taxonomy with encryption on the top two tiers

Configure auto-labelling in simulation, read the results, then turn it on

Label a Teams site and watch the container inherit the policy

Write a DLP policy for credit-card data across Exchange and SharePoint, in simulation first

Onboard a Windows endpoint and block an upload to unmanaged cloud storage

Tune a noisy DLP policy down to a usable alert volume

Apply retention with an adaptive scope and prove it holds against deletion

Run a disposition review end to end and export the evidence

Configure a departing-employee insider risk policy and triage a simulated alert

Reconstruct an exfiltration attempt from activity explorer and write the incident report

Frequently asked questions

Watch a real class. Meet your instructor. Then decide.

MCSE Cloud

MCSE Productivity

Microsoft 365 Administrator Expert (MS-102)

Microsoft 365 Endpoint Administrator (MD-102)

Who should attend

Skills you'll gain

What you'll be able to do

What you get

Certification details

Full syllabus

1 · Purview and the Compliance Portal

2 · Classifying Data

3 · Sensitivity Labels

4 · Data Loss Prevention

5 · Data Lifecycle and Records Management

6 · Insider Risk Management

7 · Investigation and Reporting

Hands-on labs

Hands-on labs

Write a custom sensitive information type for Indian PAN and Aadhaar formats, and validate it

Build and train a classifier, then measure it against a known document set

Publish a four-tier label taxonomy with encryption on the top two tiers

Configure auto-labelling in simulation, read the results, then turn it on

Label a Teams site and watch the container inherit the policy

Write a DLP policy for credit-card data across Exchange and SharePoint, in simulation first

Onboard a Windows endpoint and block an upload to unmanaged cloud storage

Tune a noisy DLP policy down to a usable alert volume

Apply retention with an adaptive scope and prove it holds against deletion

Run a disposition review end to end and export the evidence

Configure a departing-employee insider risk policy and triage a simulated alert

Reconstruct an exfiltration attempt from activity explorer and write the incident report

Frequently asked questions

Watch a real class. Meet your instructor. Then decide.

More Microsoft courses

MCSE Cloud

MCSE Productivity

Microsoft 365 Administrator Expert (MS-102)

Microsoft 365 Endpoint Administrator (MD-102)