Table of Contents
MS-500 Microsoft 365 Security Administration Exam Preparation
I’ve recently joined a Facebook group for Microsoft cloud technologies and notice that many people are looking to take this exam (MS-500: Microsoft 365 Security Administration Certification) which has just passed and added a new badge to my Acclaim (Microsoft 365 Certified: Security Administrator Associate), while the original preparation guide available on the exam registration page (link) as well as my previous blog about (Microsoft 365 Fundamentals 4 hours Learning Path), I thought that I can add some more deep insights to target the core exam objectives that needed to be addressed. Below I’m sharing with you the preparation notes and the current objectives as of the time of posting exam, along with resources that should help you prepare.
However, for starters, I would recommend taking the fundamentals first. by considering MS-900 and MS-101 if you have the time, But if you haven’t – or you just decide to go for it, then better to give it a try by hands-on experiences on Microsoft E5 security bundle like (Windows Defender ATP, Office 365 ATPs, AIP & Unified Labeling, DLP, PIM, Intune or Cloud App Security just get your Microsoft E5 trial tenant using this (link) and get into the deep dive and technologies details
Domains Covered in MS-500 Exam
This exam measures your ability to accomplish the following technical tasks:
- Implement and manage identity and access (30-35%)
- Implement and manage threat protection (20-25%)
- Implement and manage information protection (15-20%)
- Manage governance and compliance features in Microsoft 365 (25-30%)
Exam Core topics
| URL | Title | Description |
| https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#mfa-service-settings | Configure Azure Multi-Factor Authentication – Azure Active Directory | Learn how to configure settings for Azure Multi-Factor Authentication in the Azure portal |
| https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition | Location condition in Azure Active Directory Conditional Access | Learn how to use the location condition to control access to your cloud apps based on a user’s network location. |
| https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal | How to manage devices using the Azure portal | Learn how to use the Azure portal to manage devices. |
| https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-device-writeback | Azure AD Connect: Enabling device writeback | This document details how to enable device writeback using Azure AD Connect |
| https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-user-risk-policy | Risk policies – Azure Active Directory Identity Protection | Enable and configure risk policies in Azure Active Directory Identity Protection |
| https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins | Sign-in activity reports in the Azure Active Directory portal | Introduction to sign-in activity reports in the Azure Active Directory portal |
| https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-lifecycle | Set expiration for Office 365 groups – Azure Active Directory | How to set up expiration for Office 365 groups in Azure Active Directory |
| https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-protection | Configure an Azure Information Protection label for protection – AIP | You can protect your most sensitive documents and emails when you configure a label to use Rights Management protection. |
| https://docs.microsoft.com/en-us/azure/information-protection/prepare | Prepare users and groups for Azure Information Protection | Check that you have the user and group accounts that you need to start classifying, labeling, and protecting your organization’s documents and emails. |
| https://docs.microsoft.com/en-us/azure/security/fundamentals/steps-secure-identity | Secure your Azure AD identity infrastructure – Azure Active Directory | This document outlines a list of important actions administrators should implement to help them secure their organization using Azure AD capabilities |
| https://docs.microsoft.com/en-us/exchange/policy-and-compliance/ediscovery/ediscovery?view=exchserver-2019 | In-Place eDiscovery in Exchange Server | Summary: Learn about In-Place eDiscovery in Exchange Server 2016 and Exchange Server 2019. |
| https://docs.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/apply-retention-policy#use-the-eac-to-apply-a-retention-policy-to-multiple-mailboxes | Apply a retention policy to mailboxes | You can use retention policies to group one or more retention tags and apply them to mailboxes to enforce message retention settings. A mailbox can’t have more than one retention policy. |
| https://docs.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/create-a-retention-policy#step-2-create-a-retention-policy | Create a Retention Policy | In Exchange Online, you can use retention policies to manage email lifecycle. Retention policies are applied by creating retention tags, adding them to a retention policy, and applying the policy to mailbox users. |
| https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy | App protection policies overview – Microsoft Intune | Learn how Microsoft Intune app protection policies help protect your company data and prevent data loss. |
| https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#reporting-and-telemetry | Device restriction settings for Windows 10 in Microsoft Intune – Azure | See a list of all the settings and their descriptions for creating device restrictions on Windows 10 and later devices. Use these settings in a configuration profile to control screenshots, password requirements, kiosk settings, apps in the store, Microsoft Edge browser, Microsoft Defender, access to the cloud, start menu, and more in Microsoft Intune. |
| https://docs.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection | Use Microsoft Defender ATP in Microsoft Intune – Azure | Use Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) with Intune, including setup and configuration, onboarding of your Intune devices with ATP, and then use a devices ATP risk assessment with your Intune device compliance and conditional access policies to protect network resources. |
| https://docs.microsoft.com/en-us/mem/intune/protect/conditional-access-integrate-jamf | Integrate Jamf Pro with Microsoft Intune for compliance – Microsoft Intune | Use Microsoft Intune compliance policies with Azure Active Directory Conditional Access to help integrate and secure Jamf-managed devices. |
| https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-windows-10 | Protection settings for Windows 10 devices in Microsoft Intune – Azure | On Windows 10 devices, use or configure endpoint protection settings to enable Microsoft Defender features, including Application Guard, Firewall, SmartScreen, encryption and BitLocker, Exploit Guard, Application Control, Security Center, and security on local devices in Microsoft Intune. |
| https://docs.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide | Set up multi-factor authentication for users – Microsoft 365 admin | Learn how to set up multi-factor authentication for your organization. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/supervision-policies?view=o365-worldwide | Supervision policies – Microsoft 365 Compliance | Learn about using supervision policies in Microsoft 365 to capture employee communications for examination by designated reviewers. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/use-your-free-azure-ad-subscription-in-office-365?view=o365-worldwide | Use your free Azure Active Directory subscription – Microsoft 365 Compliance | Learn how to access Azure Active Directory, which is included in your organization’s paid subscription. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/what-the-dlp-policy-templates-include?view=o365-worldwide | What the DLP policy templates include – Microsoft 365 Compliance | Data loss prevention (DLP) in the Security & Compliance Center includes ready-to-use policy templates that address common compliance requirements, such as helping you to protect sensitive information subject to the U.S. Health Insurance Act (HIPAA), U.S. Gramm-Leach-Bliley Act (GLBA), or U.S. Patriot Act. This topic lists all of the policy templates, what types of sensitive information they look for, and what the default conditions and actions are. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/working-with-compliance-manager?view=o365-worldwide | Work with Microsoft Compliance Manager (Preview) – Microsoft 365 Compliance | Microsoft Compliance Manager is a free workflow-based risk assessment tool. Use it to track, assign, and verify regulatory compliance activities related to Microsoft products. |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulator?view=o365-worldwide | Attack Simulator in ATP – Office 365 | Learn how to use Attack Simulator to run simulated phishing and password attacks in your Microsoft 365 E5 or ATP Plan 2 organization. |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/dynamic-delivery-and-previewing?view=o365-worldwide | Dynamic Delivery and previewing with ATP Safe Attachments – Office 365 | When you set up your ATP safe attachments policies, you choose Dynamic Delivery to avoid message delays and enable people to preview attachments that are being scanned. |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/integrate-office-365-ti-with-wdatp?view=o365-worldwide | Integrate Office 365 ATP with Microsoft Defender ATP – Office 365 | Integrate Office 365 Advanced Threat Protection with Microsoft Defender Advanced Threat Protection to see more detailed threat management information. |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/manage-quarantined-messages-and-files?view=o365-worldwide | Manage quarantined messages and files as an admin – Office 365 | Admins can learn how to view and manage quarantined messages for all users in Exchange Online Protection (EOP). Admins in organizations with Office 365 Advanced Threat Protection (Office 365 ATP) can also manage quarantined files in SharePoint Online, OneDrive for Business, and Microsoft Teams. |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center?view=o365-worldwide | Permissions – Microsoft 365 Security & Compliance Center – Office 365 | Admins can learn about the permissions that are available in the Microsoft 365 Security & Compliance Center. |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-a-custom-blocked-urls-list-atp?view=o365-worldwide | Set up a custom blocked URLs list using ATP Safe Links – Office 365 | Learn how to set up a list of blocked URLs for your organization using Office 365 Advanced Threat Protection. |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-anti-phishing-policies?view=o365-worldwide | Anti-phishing policies – Office 365 | Admins can learn about the anti-phishing policies that are available in Exchange Online Protection (EOP) and Office 365 Advanced Threat Protection (Office 365 ATP). |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-atp-safe-links-policies?view=o365-worldwide | Set up Office 365 ATP Safe Links policies – Office 365 | Set up Safe Links policies to protect your organization from malicious links in Word, Excel, PowerPoint, and Visio files, as well as in email messages. |
| https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/view-reports-for-atp?view=o365-worldwide#what-permissions-are-needed-to-view-the-atp-reports | View reports for Advanced Threat Protection – Office 365 | Find and use reports for Office 365 Advanced Threat Protection in the Security & Compliance Center. |
| https://docs.microsoft.com/en-us/office365/enterprise/fix-problems-with-directory-synchronization | Fixing problems with directory synchronization for Microsoft 365 | Describes common causes of problems with directory synchronization in Office 365 and provides a few methods to help troubleshoot and resolve them. |
| https://docs.microsoft.com/en-us/office365/enterprise/view-service-health | How to check Microsoft 365 service health | View the health status of Microsoft 365 services before you call support to see if there is an active service interruption. |
| https://docs.microsoft.com/en-us/onedrive/user-external-sharing-settings | Change the external sharing setting for a user’s OneDrive – OneDrive | Learn how to change the OneDrive external sharing setting for a user in the Microsoft 365 admin center. |
| https://docs.microsoft.com/en-us/powershell/module/exchange/set-auditconfig?view=exchange-ps | Set-AuditConfig | You need to be assigned permissions in the Security & Compliance Center before you can use this cmdlet. For more information, see Permissions in the Security & Compliance Center. |
| https://docs.microsoft.com/en-us/powershell/module/exchange/set-mailbox?view=exchange-ps | Set-Mailbox | You can use this cmdlet for one mailbox at a time. To perform bulk management, you can pipeline the output of various Get- cmdlets (for example, the Get-Mailbox or Get-User cmdlets) and configure several mailboxes in a single-line command. You can also use the Set-Mailbox cmdlet in scripts. You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some parameters if they’re not included in the permissions assigned to you. To find the permissions required to run any cmdlet or parameter in your organization, see Find the permissions required to run any Exchange cmdlet. |
| https://sharepointmaven.com/how-to-set-a-retention-policy-on-a-sharepoint-site/ | How to set a Retention Policy on a SharePoint site – SharePoint Maven | If you are looking for an explanation and instructions on how to set up a Retention Policy on a SharePoint site – this article will help. |
| https://support.microsoft.com/en-us/office/create-and-manage-sensitivity-labels-2fb96b54-7dd2-4f0c-ac8d-170790d4b8b9?ui=en-us&rs=en-us&ad=us | Create and manage sensitivity labels – Office Support | Sensitivity labels allow you to classify and protect content that is sensitive to your business. Learn how to create a sensitivity label and make it available to your users. |
| https://support.microsoft.com/en-us/office/overview-of-data-loss-prevention-in-sharepoint-server-2016-80f907bb-b944-448d-b83d-8fec4abcc24c?ui=en-us&rs=en-us&ad=us | Overview of data loss prevention in SharePoint Server 2016 – SharePoint | Learn how you can use data loss prevention (DLP) features such as DLP queries and DLP policies to identify, monitor, and automatically protect your sensitive information from inadvertent leaks. |
| https://support.microsoft.com/en-us/office/protect-against-phishing-attempts-in-microsoft-365-86c425e1-1686-430a-9151-f7176cce4f2c?ui=en-us&rs=en-us&ad=us#ID0EAABAAA=Try_it | Protect against phishing attempts in Microsoft 365 – Office Support | Protect your email from phishing attacks by setting up ATP anti-phishing in Microsoft 365 Business and Enterprise. |
| https://support.pingidentity.com/s/article/PingOne-How-to-troubleshoot-an-AD-Connect-Instance | PingOne: How to troubleshoot an AD Connect Instance | Helpful information for an Administrator that is troubleshooting AD Connect. Includes information on how to review the log data in Event Viewer and how to use the config.aspx page. |
| https://www.maadarani.com/office-365-classification-and-retention-labels/ | Office 365: Classification and Retention Labels – O365 Mike Office 365: Classification and Retention Labels – O365 Mike | |
| https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-advanced-audit-policy | Azure Advanced Threat Protection Advanced Audit Policy check | This article provides an overview of Azure ATP’s Advanced Audit Policy check. |
| https://docs.microsoft.com/en-us/azure-advanced-threat-protection/configure-event-forwarding | Configure Windows Event Forwarding in Azure Advanced Threat Protection | Describes your options for configuring Windows Event Forwarding with Azure ATP |
| https://docs.microsoft.com/en-us/azure-advanced-threat-protection/configure-port-mirroring | Configure Port Mirroring when deploying Azure Advanced Threat Protection | Describes port mirroring options and how to configure them for Azure ATP |
| https://docs.microsoft.com/en-us/azure-advanced-threat-protection/install-atp-step5 | Configure Azure ATP sensor settings conceptual | Step five of installing Azure ATP helps you configure settings for your Azure ATP standalone sensor. |
| https://docs.microsoft.com/en-us/azure-advanced-threat-protection/install-atp-step6-vpn | Install Azure Advanced Threat Protection VPN Integration | Collect accounting information for Azure ATP by integrating a VPN. |
| https://docs.microsoft.com/en-us/azure-advanced-threat-protection/workspace-portal | Understanding the Azure Advanced Threat Protection portal | Describes how to log into the Azure ATP portal and the components of the portal |
| https://docs.microsoft.com/en-us/cloud-app-security/activity-filters | Visibility into cloud app activities – Cloud App Security | This article provides a list of activities, filters and match parameters that can be applied to activity policies. |
| https://docs.microsoft.com/en-us/cloud-app-security/file-filters | Understanding file data and filters available in Cloud App Security | This reference article provides information about the types of files and file filters used by Cloud App Security. |
| https://docs.microsoft.com/en-us/cloud-app-security/session-policy-aad | Create session policies in Cloud App Security | This article describes the procedure for setting up a Cloud App Security Conditional Access App Control session policy gain deep visibility into user session activities and block downloads using reverse proxy capabilities. |
| https://docs.microsoft.com/en-us/exchange/permissions-exo/permissions-exo | Permissions in Exchange Online | Exchange Online in Office 365 includes a large set of predefined permissions, based on the Role Based Access Control (RBAC) permissions model, which you can use right away to easily grant permissions to your administrators and users. You can use the permissions features in Exchange Online so that you can get your new organization up and running quickly. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/alert-policies?view=o365-worldwide | Alert policies in the security and compliance centers – Microsoft 365 Compliance | Create alert policies in the security and compliance center in Office 365 and Microsoft 365 to monitor potential threats, data loss, and permissions issues. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-labels-to-personal-data-in-office-365?view=o365-worldwide | Apply labels to personal data – Microsoft 365 Compliance | Learn how to use Office labels as part of your General Data Protection Regulation (GDPR) protection plan. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide | Apply a sensitivity label to content automatically – Microsoft 365 Compliance | When you create a sensitivity label, you can automatically assign a label to a document or email, or you can prompt users to select the label that you recommend. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/assign-ediscovery-permissions?view=o365-worldwide | Assign eDiscovery permissions in the Security & Compliance Center – Microsoft 365 Compliance | Assign the permissions required to perform eDiscovery-related tasks using the Security & Compliance Center. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/content-search?view=o365-worldwide | Content Search – Microsoft 365 Compliance | Use the Content Search tool in the compliance center in Office 365 or Microsoft 365 to search for content in a variety of Office 365 services. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/create-activity-alerts?view=o365-worldwide | Create activity alerts – Microsoft 365 Compliance | Add and manage activity alerts in the Security & Compliance Center so that Microsoft 365 will send you email notifications when users perform specific activities |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/create-report-on-and-delete-multiple-content-searches?view=o365-worldwide | Create, report on, and delete multiple Content Searches – Microsoft 365 Compliance | Learn how to automate Content Search tasks like creating searches and running reports via PowerShell scripts in the Security & Compliance Center in Office 365. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/create-test-tune-dlp-policy?view=o365-worldwide | Create, test, and tune a DLP policy – Microsoft 365 Compliance | In this article, you’ll learn how to create, test, and tune a DLP policy according to your organizational needs. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide | Overview of data loss prevention – Microsoft 365 Compliance | With a data loss prevention (DLP) policy in the Security & Compliance Center, you can identify, monitor, and automatically protect sensitive information across Office 365. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/enable-mailbox-auditing?view=o365-worldwide | Manage mailbox auditing – Microsoft 365 Compliance | Mailbox audit logging is turned on by default (also called default mailbox auditing or mailbox auditing on by default). This means that certain actions performed by mailbox owners, delegates, and admins are automatically logged in a mailbox audit log, where you can search for activities performed on the mailbox. |
| https://docs.microsoft.com/en-us/powershell/module/sharepoint-online/set-spotenant?view=sharepoint-ps | Set-SPOTenant | You can use the Set-SPOTenant cmdlet to enable external services and to specify the versions in which site collections can be created. You can also use the Set-SPOSite cmdlet together with the Set-SPOTenant cmdlet to block access to a site in your organization and redirect traffic to another site. You must be a SharePoint Online administrator or Global Administrator to run the cmdlet. |
| https://docs.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices | Control access from unmanaged devices – SharePoint in Microsoft 365 | Learn how to block or limit access to SharePoint and OneDrive content on devices that aren’t compliant or joined to a domain. |
| https://docs.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off | Manage sharing settings – SharePoint in Microsoft 365 | Learn how global and SharePoint admins can change the organization-level sharing settings for SharePoint and OneDrive in Microsoft 365. |
| https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/machine-groups | Create and manage machine groups in Microsoft Defender ATP – Windows security | Create machine groups and set automated remediation levels on them by confiring the rules that apply on the group |
| https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/ad-ca-vpn-connectivity-windows10 | Conditional access for VPN connectivity using Azure AD | In this optional step, you can fine-tune how authorized VPN users access your resources using Azure Active Directory (Azure AD) conditional access. |
| https://events.collab365.community/configure-data-loss-prevention-policies-in-exchange-online-in-office-365/ | Configure Data Loss Prevention policies in Exchange Online in Office 365 – Collab365 Events | |
| https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/privileged-identity-management/pim-how-to-change-default-settings.md | azure-docs/pim-how-to-change-default-settings.md at master · MicrosoftDocs/azure-docs · GitHub | Open source documentation of Microsoft Azure. Contribute to MicrosoftDocs/azure-docs development by creating an account on GitHub. |
| https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/users-groups-roles/groups-dynamic-membership.md | azure-docs/groups-dynamic-membership.md at master · MicrosoftDocs/azure-docs · GitHub | Open source documentation of Microsoft Azure. Contribute to MicrosoftDocs/azure-docs development by creating an account on GitHub. |
| https://help.bittitan.com/hc/en-us/articles/115008104507-How-do-I-assign-the-elevated-admin-role-Organization-Management-to-the-account-that-is-performing-a-Public-Folder-migration- | How do I assign the elevated admin role ‘Organization Management’ to the account that is performing a Public Folder migration? – BitTitan Help Center | ​How do I assign the elevated admin role ‘Organization Management’ to the administrative account that is performing a Public Folder… |
| https://lazyadmin.nl/office-365/how-to-setup-mfa-in-office-365/ | How-to Setup Multi-Factor Authentication in Office 365 — LazyAdmin | Howto enable Office 365 MFA, tips on rolling it out in your organisation and Office 365 MFA License details explained. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide | Export Content Search results – Microsoft 365 Compliance | Export the search results from a Content Search in the Security & Compliance Center to a local computer. Email results are exported as PST files. Content from SharePoint and OneDrive for Business sites are exported as native Office documents. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-core-ediscovery?view=o365-worldwide | Get started with core eDiscovery cases in Microsoft 365 – Microsoft 365 Compliance | This article describes how to get started using core eDiscovery in Microsoft 365. After you assign eDiscovery permissions and create a case, you can add members, create eDiscovery holds, and then search for and export data that’s relevant to your investigation. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-core-ediscovery?view=o365-worldwide#step-4-place-content-locations-on-hold | Get started with core eDiscovery cases in Microsoft 365 – Microsoft 365 Compliance | This article describes how to get started using core eDiscovery in Microsoft 365. After you assign eDiscovery permissions and create a case, you can add members, create eDiscovery holds, and then search for and export data that’s relevant to your investigation. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/keyword-queries-and-search-conditions?view=o365-worldwide | Keyword queries and search conditions for Content Search – Microsoft 365 Compliance | Learn about email and file properties that you can search in Exchange Online mailboxes and in SharePoint or OneDrive for Business sites using the Content Search tool in the Security & Compliance Center. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/labels?view=o365-worldwide | Learn about retention labels – Microsoft 365 Compliance | Learn how retention labels classify data across your organization for governance, and enforce retention rules based on that classification. You can also use retention labels to implement a records management solution for Microsoft 365. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/manage-gdpr-data-subject-requests-with-the-dsr-case-tool?view=o365-worldwide#more-information-about-using-the-dsr-case-tool | Manage GDPR data subject requests with DSR case tool in Security & Compliance Center – Microsoft 365 Compliance | The GDPR gives EU citizens (called data subjects) specific rights to their personal data; these rights include obtaining copies of it, requesting changes to it, restricting the processing of it, deleting it, or receiving it in an electronic format. A formal request by a data subject to take an action on their personal data is called a Data Subject Request or DSR. You can use DSR Cases in the compliance center in Office 365 and Microsoft 365 to manage your organization’s DSR investigations. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud?view=o365-worldwide | Meet data protection and regulatory requirements with Compliance Manager for Microsoft cloud services – Microsoft 365 Compliance | The Compliance Manager in the Microsoft Service Trust Portal provides tools to track, implement, and manage the controls to help your organization reach compliance with security and data protection industry standards (such as GDPR, ISO 27001 and 27018, and HIPAA) when measured against Microsoft cloud services, such as Office 365 and Microsoft Azure. The Compliance Manager helps the person who oversees the data protection and privacy strategy for your organization manage your compliance and risk assessment process. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies?view=o365-worldwide | Learn about retention policies to automatically retain or delete content – Microsoft 365 Compliance | Use a retention policy to decide proactively whether to retain content, delete content, or both – retain and then delete the content; apply a single policy to the entire organization or specific locations or users; and apply a policy to all content or content meeting specific conditions. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide | Search the audit log in the Security & Compliance Center – Microsoft 365 Compliance | Use the Security & Compliance Center to search the unified audit log to view user and administrator activity in your organization. |
| https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide | Learn about sensitivity labels – Microsoft 365 Compliance | Use sensitivity labels from the Microsoft Information Protection framework to classify and protect your organization’s data, without hindering user productivity and collaboration. |
Also, please share the post within your circles so it helps them to prepare for the exam.
The free online CSS cleaner tool helps you to organize style files for websites.
