Microsoft · SC-401
Insider Risk Management setup
SC-401 · Lesson 10 of 13 · 1:02:30
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-401 exam (Microsoft Certified: Information Security Administrator Associate). In this lesson: Insider Risk Management role groups and pseudonymization, auditing, connectors and integrations (HR, healthcare, Defender for Endpoint, DLP), global settings, indicators, priority user groups and analytics, and policy templates and quick policies. Includes three original practice questions.
Preview the topics
- Security wants to detect unusual downloads by employees in their last weeks at the company. What must be set up first?
- Before creating any policy, a company wants to know which risky activities are already common in its tenant. What should it run?
- A hospital wants alerts when staff open patient records they have no reason to see. Which template fits?