SC-401 received its first update since it became generally available, and the good news for those of you already preparing of the exam is that it only received minor grammatical updates, rather than any topics being added or removed.

Implement information protection (30–35%)

Implement and manage data classification

Implement and manage sensitivity labels in Microsoft Purview

Implement information protection for Windows, file shares, and Exchange

Implement data loss prevention and retention (30–35%)

Create and configure data loss prevention policies

Implement and monitor Microsoft Purview Endpoint DLP

Implement and manage retention

Manage risks, alerts, and activities (30–35%)

Implement and manage Microsoft Purview Insider Risk Management

Manage information security alerts and activities

Protect data used by AI services