MS-4002: Prepare security and compliance to support Microsoft 365 Copilot

This learning path examines the key Microsoft 365 security and compliance features that administrators must prepare in order to successfully implement Microsoft 365 Copilot.

This course is designed for administrators, Microsoft 365 administrators, or persons aspiring to the Microsoft 365 Administrator role who have completed at least one of the Microsoft 365 role-based administrator certification paths.

Students should have basic functional experience with Microsoft 365 services, and must have a proficient understanding of general IT practices.

After completing this course, students will be able to:

• Describe the various features provided in the Microsoft 365 ecosystem for securing user access, such as Conditional Access policies, multifactor authentication, self-service password management, Smart Lockout policies, and security defaults.
• Implement Microsoft Defender for Cloud Apps, which identifies and combats cyberthreats across all your Microsoft and third-party cloud services.
• Describe how Microsoft Defender for Endpoint helps enterprise networks prevent, detect, investigate, and respond to advanced threats.
• Describe the Microsoft Defender for Office 365 protection stack and its corresponding threat intelligence features, including Threat Explorer, Threat Trackers, and Attack simulation training.
• Identify the capabilities of both retention policies and retention labels.
• Describe how information barriers can restrict or allow communication and collaboration among specific groups of users.
• Understand how organisations can use Microsoft Purview Data Loss Prevention to help protect sensitive data and define the protective actions that organisations can take when a DLP rule is violated.
• Understand the process for implementing sensitivity labels, including applying proper administrative permissions, determining a deployment strategy, creating, configuring, and publishing labels, and removing and deleting labels.

Implement Microsoft 365 Copilot

Manage secure user access in Microsoft 365

• Examine the identity and access tools used in Microsoft 365
• Manage user passwords
• Implement Conditional Access policies
• Enable pass-through authentication
• Implement multifactor authentication
• Explore passwordless authentication options
• Explore self-service password management
• Implement Microsoft Entra Smart Lockout
• Explore Security Defaults in Microsoft Entra ID
• Investigate authentication issues using sign-in logs

Manage permissions, roles, and role groups in Microsoft 365

Deploy Microsoft 365 Apps for enterprise

Implement Microsoft Purview Data Loss Prevention

Implement sensitivity labels

Manage Microsoft 365 Copilot extensibility