Microsoft · SC-900
Insider risk, eDiscovery, and audit
SC-900 · Lesson 15 of 15 · 1:49:49
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-900 exam (Microsoft Security, Compliance, and Identity Fundamentals). In this lesson: Microsoft Purview Insider Risk Management (privacy by design, departing users, data leaks, risky AI usage, from alerts to cases and escalation), eDiscovery (cases, searches, holds, exports, review sets and premium features), and audit (the unified audit log, Copilot interactions, Audit Standard with 180 days of records, Audit Premium with longer retention). Includes three original practice questions.
Preview the topics
- An engineer who just resigned starts downloading large numbers of design files, and emails some of them to a personal address. Which Purview solution is built to catch this?
- A company expects a lawsuit about a former employee. Its lawyers want that person’s mailbox and OneDrive preserved right away, so nothing can be permanently deleted. What should it do?
- Investigators need to see who opened a sensitive SharePoint file eleven months ago, but the company only has Audit (Standard). What’s the problem?