---
title: SC-401 Labs
description: "Lab exercises for SC-401: Administering Information Security in Microsoft 365. Includes Applied Skills, Microsoft Learn, and Microsoft GitHub labs."
---

**Applied Skills:**

:::note
Applied Skills on Microsoft Learn are practical, hands-on exercises designed to help users build and demonstrate proficiency in specific technologies or tasks. These small labs focus on solving real-world scenarios, reinforcing learning through direct application of skills, and preparing users for industry roles or certifications.
:::

### Implement retention, eDiscovery, and Communication Compliance in Microsoft Purview

### Implement information protection and data loss prevention by using Microsoft Purview

### Protect information in Microsoft 365 Copilot by using Microsoft Purview

**Microsoft Learn:**

:::note
Microsoft Learn Sandboxes require you to bring in your own subscription.
:::

### Investigate insider risk alerts in Microsoft Purview

### Investigate Microsoft Purview Data Loss Prevention alerts

### Configure static and adaptive retention policies in Microsoft Purview

### Configure retention labels for financial and HR content

### Configure disposition review for contract retention

### Create a sensitive info type

### Create and publish a sensitivity label

### Create a data loss prevention policy

### Create retention policies

### Create and publish retention labels

**Microsoft GitHub:**

:::note
Microsoft GitHub labs are series of labs designed to be used in Microsoft Instructor Lead Trainings delivered by Microsoft Certified Trainers where participants also have access to the environment to perform them. This means that for everyone else, it is necessary to bring your own environment to go through them.
:::

### Prepare your environment for administration

### Manage compliance and security roles

### Create and manage sensitive information types

### Create and manage sensitivity labels

### Deploy Microsoft Purview Message Encryption

### Implement and manage DLP policies

### Implement and manage endpoint DLP

### Configure retention policies

### Implement Insider Risk Management

### Implement Adaptive Protection

### Search the Audit log

### Perform a content search

### Protect data in AI environments

### Validate sensitivity, DLP, and retention policies