|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ms_sc_401/
课程评论:没有评论
课程名称:MS InfoSec Admin Associate (SC-401) 考试问题(截止2025年6月) 课程概述: 本课程旨在帮助学员掌握信息安全管理的关键技能,重点涵盖三个主要领域,具体包括: 1. 信息保护的实施(30-35%) - 实施和管理数据分类,识别组织数据的敏感信息需求。 - 创建和管理自定义敏感信息类型,实施文件指纹识别和精确数据匹配分类器。 - 监控数据分类和标签使用,配置敏感信息类型的光学字符识别支持。 - 在Microsoft Purview中实施和管理敏感性标签,配置保护设置。 2. 数据丢失预防与保留的实施(30-35%) - 创建和配置数据丢失预防政策,实施角色和权限管理。 - 设计基于组织需求的数据丢失预防策略,配置自适应保护的DLP政策。 - 管理信息的保留计划,包括创建和配置保留标签和政策。 3. 风险、警报与活动的管理(30-35%) - 实施和管理Microsoft Purview内外部风险管理,规划与Microsoft Defender的集成。 - 配置和管理内部风险管理设置,管理安全警报和活动。 - 使用Microsoft Purview审计跟踪活动,分析和响应数据丢失预防警报。 课程将帮助学员理解如何在现代企业环境中有效保护信息安全,管理数据,并妥善处理敏感信息需求,提升整体信息安全管理能力。
Skills at a glanceImplement information protection (30-35%)Implement data loss prevention and retention (30-35%)Manage risks, alerts, and activities (30-35%)Implement information protection (30-35%)Implement and manage data classificationIdentify sensitive information requirements for an organization's dataTranslate sensitive information requirements into built-in or custom sensitive info typesCreate and manage custom sensitive info typesImplement document fingerprintingCreate and manage exact data match (EDM) classifiersCreate and manage trainable classifiersMonitor data classification and label usage by using data explorer and content explorerConfigure optical character recognition (OCR) support for sensitive info typesImplement and manage sensitivity labels in Microsoft PurviewImplement roles and permissions for administering sensitivity labelsDefine and create sensitivity labels for items and containersConfigure protection settings and content marking for sensitivity labelsConfigure and manage publishing policies for sensitivity labelsConfigure and manage auto-labeling policies for sensitivity labelsApply a sensitivity label to containers, such as Microsoft Teams, Microsoft 365 Groups, Microsoft Power BI, and Microsoft SharePointApply sensitivity labels by using Microsoft Defender for Cloud AppsImplement information protection for Windows, file shares, and ExchangePlan and implement the Microsoft Purview Information Protection clientManage files by using the Microsoft Purview Information Protection clientApply bulk classification to on-premises data by using the Microsoft Purview Information Protection scannerDesign and implement Microsoft Purview Message EncryptionDesign and implement Microsoft Purview Advanced Message EncryptionImplement data loss prevention and retention (30-35%)Create and configure data loss prevention policiesDesign data loss prevention policies based on an organization's requirementsImplement roles and permissions for data loss preventionCreate and manage data loss prevention policiesConfigure data loss prevention policies for Adaptive ProtectionInterpret policy and rule precedence in data loss preventionCreate file policies in Microsoft Defender for Cloud Apps by using a DLP policyImplement and monitor Microsoft Purview Endpoint DLPSpecify device requirements for Endpoint DLP, including extensionsConfigure advanced DLP rules for devices in DLP policiesConfigure Endpoint DLP settingsConfigure just-in-time protectionMonitor endpoint activitiesImplement and manage retentionPlan for information retention and disposition by using retention labelsCreate, configure, and manage adaptive scopesCreate retention labels for data lifecycle managementConfigure a retention label policy to publish labelsConfigure a retention label policy to auto-apply labelsInterpret the results of policy precedence, including using Policy lookupCreate and configure retention policiesRecover retained content in Microsoft 365Manage risks, alerts, and activities (30-35%)Implement and manage Microsoft Purview Insider Risk ManagementImplement roles and permissions for Insider Risk ManagementPlan and implement Insider Risk Management connectorsPlan and implement integration with Microsoft Defender for EndpointConfigure and manage Insider Risk Management settingsConfigure policy indicatorsSelect an appropriate policy templateCreate and manage Insider Risk Management policiesManage forensic evidence settingsEnable and configure insider risk levels for Adaptive ProtectionManage insider risk alerts and casesManage Insider Risk Management workflow, including notice templatesManage information security alerts and activitiesAssign Microsoft Purview Audit (Premium) user licensesInvestigate activities by using Microsoft Purview AuditConfigure audit retention policiesAnalyze Purview activities by using activity explorerRespond to data loss prevention alerts in the Microsoft Purview portalInvestigate insider risk activities by using the Microsoft Purview portalRespond to Purview alerts in Microsoft Defender XDRRespond to Defender for Cloud Apps file policy alertsPerform searches by using Content searchProtect data used by AI servicesImplement controls in Microsoft Purview to protect content in an environment that uses AI servicesImplement controls in Microsoft 365 productivity workloads to protect content in an environment that uses AI servicesImplement pre-requisites for Data Security Posture Management (DSPM) for AIManage roles and permissions for DSPM for AIConfigure DSPM for AI policiesMonitor activities in DSPM for AI