new intro module for sc-401

Author: riswinto

learn-pr/wwl-sci/purview-protect-sensitive-data/index.yml

@@ -1,25 +1,27 @@
 ### YamlMime:Module
 uid: learn.wwl.purview-protect-sensitive-data
 metadata:
-  title: Prepare for Microsoft Purview Insider Risk Management
-  description: "Prepare for Microsoft Purview Insider Risk Management."
-  ms.date: 1/3/2025
+  title: Protect sensitive data in a digital world
+  description: "Protect sensitive data in a digital world."
+  ms.date: 03/10/2025
   author: wwlpublish
   ms.author: riswinto
   ms.topic: module
   ms.service: purview
   hidden: false
-title: Prepare for Microsoft Purview Insider Risk Management
-summary: Discover strategies for planning and configuring Microsoft Purview Insider Risk Management to meet organizational needs and protect privacy.
+title: Protect sensitive data in a digital world
+summary: Discover how Microsoft Purview helps organizations classify, protect, and monitor sensitive data across cloud, endpoint, and AI environments. This module explores strategies for securing data through classification, labeling, encryption, and proactive risk management.
 abstract: |
   After completing this module, you'll be able to:
-  - Collaborate with stakeholders to prepare for insider risk management.
-  - Understand what's needed to meet prerequisites for implementation.
-  - Configure settings to align with compliance and privacy needs.
-  - Explore how connecting tools and data sources enhances risk management.
+  - Describe challenges in protecting sensitive data across cloud and AI environments.
+  - Explain how Microsoft Purview enables data classification, labeling, and protection.
+  - Identify how data loss prevention (DLP) prevents unauthorized data sharing.
+  - Understand how Insider Risk Management helps detect potential threats.
+  - Explore security monitoring tools for detecting and responding to data risks.
 prerequisites: |
-  - Understanding of insider risk concepts.
-  - Familiarity with organizational compliance and privacy practices.
+  - Basic understanding of data security concepts.
+  - Familiarity with compliance and risk management practices.
+  - Awareness of Microsoft 365 security and compliance tools.
 iconUrl: /training/achievements/generic-badge.svg
 levels:
 - intermediate

learn-pr/wwl-sci/purview-protect-sensitive-data/knoweldge-check.yml

@@ -16,15 +16,15 @@ quiz:
   questions:
   - content: "Your organization is expanding its data protection strategy. You need a way to classify and protect sensitive files across Microsoft 365 services. Which feature should you implement?"
     choices:
-    - content: "Microsoft Purview Sensitivity Labels"
-      isCorrect: true
-      explanation: "Correct: Sensitivity labels help classify and protect data by applying encryption, access restrictions, and content markings."
     - content: "Microsoft Purview Data Loss Prevention (DLP)"
       isCorrect: false
-      explanation: "Incorrect: DLP helps prevent unauthorized data sharing but does not classify and label data."
+      explanation: "Incorrect: DLP helps prevent unauthorized data sharing but doesn't classify and label data."
     - content: "Microsoft Defender for Cloud"
       isCorrect: false
       explanation: "Incorrect: Microsoft Defender for Cloud focuses on cloud security posture management, not data classification."
+    - content: "Microsoft Purview Sensitivity Labels"
+      isCorrect: true
+      explanation: "Correct: Sensitivity labels help classify and protect data by applying encryption, access restrictions, and content markings."
 
   - content: "Your organization is adopting AI-driven tools to improve efficiency. However, leadership is concerned about the risk of sensitive data being used in AI model training. Which Microsoft Purview feature can help prevent unauthorized data use?"
     choices:
@@ -38,63 +38,38 @@ quiz:
       isCorrect: false
       explanation: "Incorrect: Microsoft Defender XDR focuses on threat detection rather than data protection for AI models."
 
-  - content: "Your company is expanding remote work options, and employees are accessing sensitive files from unmanaged devices. Which approach aligns with Zero Trust principles to secure access?"
-    choices:
-    - content: "Require multifactor authentication (MFA) and conditional access policies."
-      isCorrect: true
-      explanation: "Correct: Zero Trust requires continuous verification through MFA and conditional access."
-    - content: "Allow access from any device but require VPN usage."
-      isCorrect: false
-      explanation: "Incorrect: VPN alone does not enforce identity verification and risk-based access."
-    - content: "Block all remote access to sensitive files."
-      isCorrect: false
-      explanation: "Incorrect: Blocking all access is not practical and hinders productivity."
-
   - content: "Your security team wants to analyze how sensitive data is being accessed and shared within your organization. Which tool provides insights into user activity and data movement?"
     choices:
     - content: "Activity Explorer"
       isCorrect: true
       explanation: "Correct: Activity Explorer helps track user activity, data access, and movement within Microsoft 365."
     - content: "Content Explorer"
       isCorrect: false
-      explanation: "Incorrect: Content Explorer helps view classified data but does not track user activity."
+      explanation: "Incorrect: Content Explorer helps view classified data but doesn't track user activity."
     - content: "Microsoft Purview Audit"
       isCorrect: false
-      explanation: "Incorrect: Microsoft Purview Audit provides forensic activity logs but does not focus on real-time data movement."
+      explanation: "Incorrect: Microsoft Purview Audit provides forensic activity logs but doesn't focus on real-time data movement."
 
   - content: "Your organization recently experienced a data breach due to an insider threat. Leadership wants a solution to identify risky user behavior before a breach occurs. Which Microsoft Purview feature should be implemented?"
     choices:
-    - content: "Insider Risk Management"
-      isCorrect: true
-      explanation: "Correct: Insider Risk Management detects and analyzes risky user behavior before a data breach happens."
     - content: "Microsoft Defender XDR"
       isCorrect: false
       explanation: "Incorrect: Microsoft Defender XDR focuses on external threat detection rather than insider risks."
     - content: "Sensitivity Labels"
       isCorrect: false
-      explanation: "Incorrect: Sensitivity Labels help classify and protect data but do not identify risky user behavior."
-
-  - content: "A security analyst needs to investigate an incident where an employee accessed a large volume of sensitive files. Which Microsoft Purview tool can provide detailed activity logs for the investigation?"
-    choices:
-    - content: "Microsoft Purview Audit"
-      isCorrect: true
-      explanation: "Correct: Microsoft Purview Audit provides detailed activity logs for security investigations."
-    - content: "Content Explorer"
-      isCorrect: false
-      explanation: "Incorrect: Content Explorer shows classified data but does not provide user activity logs."
+      explanation: "Incorrect: Sensitivity Labels help classify and protect data but don't identify risky user behavior."
     - content: "Insider Risk Management"
-      isCorrect: false
-      explanation: "Incorrect: Insider Risk Management helps detect risk but does not provide detailed forensic logs."
-
+      isCorrect: true
+      explanation: "Correct: Insider Risk Management detects and analyzes risky user behavior before a data breach happens."
 
-  - content: "Your company is concerned about unauthorized sharing of classified financial documents. How can Microsoft Purview help prevent data leaks?"
+  - content: "Your organization is adopting AI-powered applications and needs to ensure that sensitive data isn't exposed or misused. Which Microsoft Purview feature helps manage security policies and risks for AI-driven environments?"
     choices:
-    - content: "Implement DLP policies to block unauthorized sharing."
-      isCorrect: true
-      explanation: "Correct: DLP policies can prevent financial documents from being shared outside the organization."
-    - content: "Use Content Explorer to track classified financial documents."
+    - content: "Microsoft Defender XDR"
       isCorrect: false
-      explanation: "Incorrect: Content Explorer provides insights but does not prevent data leaks."
-    - content: "Configure Microsoft Defender XDR to detect financial threats."
+      explanation: "Incorrect: Microsoft Defender XDR focuses on detecting and responding to security threats, but it doesn't specifically manage AI data security."
+    - content: "Microsoft Purview Data Security Posture Management (DSPM) for AI"
+      isCorrect: true
+      explanation: "Correct: DSPM for AI helps organizations enforce security policies, manage risks, and monitor data usage in AI-driven environments."
+    - content: "Microsoft Purview Data Loss Prevention (DLP)"
       isCorrect: false
-      explanation: "Incorrect: Defender XDR detects threats but does not enforce sharing restrictions."
+      explanation: "Incorrect: DLP prevents unauthorized data sharing but doesn't provide a comprehensive security posture for AI environments."