Core Objects and Security Principles of Microsoft 365
- Licence types for users and groups and their effect on available features
- Organisation settings and domains in the Microsoft 365 admin center
- Finding and configuring the right objects in Exchange, SharePoint and Teams admin center
- Roles and permissions for SharePoint sites
- Zero Trust: the core principles and what they mean day to day
- Authentication, authorisation and threat protection overview
Identity and Access
- Microsoft Entra ID: features and capabilities
- Understanding Conditional Access and single sign-on
- Narrowing down typical sign-in problems: MFA, Conditional Access, risky sign-ins
- Reading and interpreting Identity Secure Score
- Evaluating audit logs for user and administrator activity
- Privileged Identity Management, app registrations and enterprise applications
Data Protection and Governance with Microsoft Purview
- Information Protection, Data Loss Prevention, Insider Risk Management and Communication Compliance overview
- Data Security Posture Management for AI and Data Lifecycle Management
- Sensitivity labels: typical use cases
- Data classification and retention
Copilot and Data Security
- How Copilot accesses data and the role Microsoft Graph plays in this
- How permissions in Microsoft 365, Purview and Defender limit Copilot’s behaviour
- Principles of responsible AI
- Detecting oversharing in SharePoint: data access governance report and SharePoint Advanced Management
Identifying and Responding to Risks
- Compliance Manager: evaluating risks and recommendations
- Finding sensitive information with Data Explorer
- Handling DLP alerts and violations from Communication Compliance
- Detecting and controlling AI activity with DSPM for AI
- Content search in Purview eDiscovery
Administering Copilot and Agents
- Comparing built-in Copilot and agent features
- Licensing model: monthly licence versus usage-based billing
- Which Copilot features can be turned on and off
- Use cases for Researcher, Analyst and custom agents
- Assigning Copilot licences, evaluating usage and adoption
- Managing prompts: saving, sharing, scheduling, deleting
- Creating an agent, controlling access, publishing process and monitoring
