Book Image

Microsoft Information Protection Administrator SC-400 Certification Guide

By : Shabaz Darr, Viktor Hedberg
2 (1)
Book Image

Microsoft Information Protection Administrator SC-400 Certification Guide

2 (1)
By: Shabaz Darr, Viktor Hedberg

Overview of this book

Cloud technologies have massively increased the amount of data being produced and the places in which this data is stored. Without proper planning and discipline in configuring information protection for your data, you may be compromising information and regulatory compliance. Microsoft Information Protection Administrator SC-400 Certification Guide begins with an overview of the SC-400 exam, and then enables you to envision, implement, and administer the Information Protection suite offered by Microsoft. The book also provides you with hands-on labs, along with the theory of creating policies and rules for content classification, data loss prevention, governance, and protection. Toward the end, you'll be able to take mock tests to help you prepare effectively for the exam. By the end of this Microsoft book, you'll have covered everything needed to pass the SC-400 certification exam, and have a handy, on-the-job desktop reference guide.
Table of Contents (19 chapters)
1
Section 1: Exam Overview and Introduction to Information Protection
4
Section 2: Implementing Information Protection
9
Section 3: Implementing Data Loss Prevention
13
Section 4: Implementing Information Governance

Managing DLP violations in Microsoft Defender for Cloud Apps

If you configure the location of the DLP policy as Microsoft Defender for Cloud Apps in the compliance center, then the matches will show in the standard DLP report.

If you configure a file policy in Microsoft Defender for Cloud Apps, the matched conditions and actions will be logged in Microsoft Defender for Cloud Apps rather than in the DLP report.

Let's use an example in which you have configured a file policy in Microsoft Defender for Cloud Apps to detect files that include tax ID numbers that are shared with users outside your organization from either OneDrive or SharePoint Online. The file policy is also configured to automatically move them into the trash and block external access.

To review any matches for this policy, you will need to open the Microsoft Defender for Cloud Apps portal, https://portal.cloudappsecurity.com, and complete these steps:

  1. Underneath the Control setting, click on Policies...