Microsoft Purview Professional Exam Preparation
Prepare for the Microsoft Purview professional assessment through applied scenario reasoning, diagnostic drills, control...
12 lessons · 9 hrCourse
Microsoft Purview Complete Course: Data Security, Governance, Compliance, and AI
About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.
Difficulty
All levels
Modules
10
Lessons
22
Time
26 hr 30 min
Language
en
Created by
Threat Intelligence Lab
Updated
29 September 2026
About this course
This complete, practical course teaches how Microsoft Purview becomes a governed security, compliance, and data-management layer across Microsoft 365 and the wider data estate. It joins the two disciplines that organizations often separate: data governance through Data Map and Unified Catalog, and data security and compliance through Information Protection, DLP, lifecycle management, Audit, eDiscovery, human-risk workflows, Compliance Manager, and AI controls.
The course is designed for administrators, security and compliance professionals, data stewards, records managers, privacy teams, architects, auditors, and technical leaders. Each lesson explains the purpose behind the capability, shows how it fits with neighboring controls, guides the learner through decisions and failure conditions, and ends with an operational method that can be used in a real program. The final capstone produces an end-to-end, license-aware Purview control package with test evidence and clearly stated coverage boundaries.
What you'll learn
- ✓ Explain how Purview data governance, data security, compliance, Microsoft 365, identity, permissions, endpoints, and AI controls form one bounded architecture.
- ✓ Design classification, labeling, DLP, retention, investigation, catalog, and AI controls from explicit business risks and governance requirements.
- ✓ Deploy, test, monitor, troubleshoot, investigate, and improve Purview capabilities as production services.
- ✓ Produce a traceable control package that connects policy intent, licensing, configuration, evidence, residual risk, and accountable review.
Before you begin
You will get more from this course if these foundations are already familiar.
- Basic Microsoft 365 and security knowledge — Learners should understand users, groups, permissions, files, email, collaboration services, cloud administration, and the purpose of security and compliance controls.
Course content
Module 1: 1. Understand the Purview Security and Governance System
Build the mental model, licensing map, roles, and governance structure needed before configuring controls.
Map the Purview Landscape and Its Security Boundaries
Separate data governance, data security, compliance, identity, access, and workload responsibilities so every control has a clear purpose.
Translate Licensing, Roles, and Governance into an Operating Model
Turn feature entitlements and administrative roles into accountable, least-privilege operations.
Module 2: 2. Discover, Map, and Curate the Data Estate
Use Data Map and Unified Catalog to build trusted metadata, ownership, lineage, and data products.
Design Data Map Scanning and Metadata Collection
Plan collections, source registration, credentials, scans, classification, and monitoring without confusing metadata discovery with data access.
Build Unified Catalog, Lineage, Quality, and Data Products
Convert scanned metadata into business domains, trusted products, lineage, access workflows, and measurable data health.
Module 3: 3. Classify and Protect Information
Design detection logic, sensitivity labels, publishing policies, encryption, and automation that users can operate.
Engineer Sensitive Information Types and Classifiers
Choose built-in SITs, regex, keyword evidence, EDM, document fingerprinting, and trainable classifiers according to the data and decision.
Design Sensitivity Labels, Publishing, and Auto-Labeling
Create a small handling taxonomy, publish it deliberately, validate encryption, and automate only high-confidence decisions.
Module 4: 4. Prevent Unsafe Data Movement
Build proportionate DLP controls across Microsoft 365 services, endpoints, browsers, devices, and AI routes.
Design DLP Policies from Business Scenarios
Translate a data-loss scenario into locations, evidence, conditions, exceptions, actions, alerts, and measurable outcomes.
Extend DLP to Endpoints, Browsers, Teams, and AI
Protect data after it leaves a repository by validating device onboarding, application support, destination controls, and user experience.
Module 5: 5. Govern the Information Lifecycle
Translate retention schedules into policies, labels, records, events, holds, disposition, and defensible deletion.
Design Retention Policies and Labels
Choose location-wide retention or item-level labels based on obligation, event, lifecycle, and user experience.
Operate Records, Events, Disposition, and Legal Holds
Run the human and technical processes that turn retention configuration into defensible records management.
Module 6: 6. Investigate and Preserve Evidence
Use Audit and eDiscovery to reconstruct activity, preserve content, collect proportionately, and maintain case integrity.
Use Purview Audit as Evidence
Construct reliable audit searches, preserve context, understand licensing and retention, and avoid overclaiming from missing events.
Run eDiscovery Cases, Holds, Searches, and Reviews
Move from legal purpose to custodians, holds, collections, review sets, exports, and defensible case closure.
Module 7: 7. Manage Human, Communication, and Compliance Risk
Apply privacy-aware risk workflows, ethical review, information barriers, and evidence-backed compliance improvement.
Operate Insider Risk and Communication Compliance Responsibly
Use indicators and communication policies with proportionality, privacy, separation of duties, and human review.
Use Information Barriers and Compliance Manager as Governed Controls
Translate separation requirements and regulatory obligations into scoped controls, tests, evidence, and improvement work.
Module 8: 8. Protect Privacy, SharePoint, Microsoft 365, and AI
Apply Purview controls across collaboration services and generative AI while respecting permissions, privacy, and governance.
Secure SharePoint and Microsoft 365 Collaboration Paths
Connect site governance, file labels, permissions, sharing, DLP, retention, Office clients, and investigation evidence.
Govern Microsoft 365 Copilot and Other Generative AI
Build a governed data foundation, protect AI interactions, control third-party routes, and establish AI GRC.
Protect Privacy and Support Data-Subject Workflows
Govern the personal information processed by Purview itself and build authorized, traceable workflows for locating and acting on data-subject information.
Module 9: 9. Integrate, Report, and Operate Purview
Connect scanners, APIs, reports, health monitoring, support, change management, and incident workflows.
Integrate Scanners, APIs, Reporting, and Multi-Cloud Sources
Design reliable integrations with clear capability boundaries, pagination, identity, reconciliation, and ownership.
Run Purview as a Production Security Service
Establish health checks, change control, incident response, support, release gates, and service-level metrics.
Turn DSPM Findings into Data Security Investigations
Connect posture discovery, risk context, investigations, remediation, and outcome measurement without treating a recommendation as a conclusion.
Module 10: 10. Design and Prove a Complete Purview Program
Synthesize governance, architecture, controls, rollout, evidence, and improvement in a practical capstone.
Build the Purview Target Architecture and Roadmap
Create a risk-led target state that connects data domains, Microsoft 365 workloads, controls, licenses, owners, and phased delivery.
Capstone: Prove the Security Layer End to End
Produce and test a complete Purview control package for a realistic company scenario.