This module moves from solution recognition to applied matching. You'll watch a demonstration of how the Microsoft Purview solution map is used to categorize real-world compliance scenarios, then complete a structured matching activity that pairs each Microsoft Purview solution to its governance objective and a real-world use case—mirroring the flash-card job task directly.

This module introduces the two independent types of sensitivity labels in Microsoft Purview—labels applied at the container scope (SharePoint Online sites, Microsoft Teams) and at the content scope (files and emails). You'll learn what each scope actually enforces, where the two converge at enforcement, and at least one canonical example where expected label behavior differs from actual product behavior. By the end of the module, you'll be able to read a sensitivity-label ticket and identify which scope is at play.

This module builds toward the job task deliverable—a three-slide overview that distinguishes between container and content sensitivity labels for a non-technical project team audience. You'll learn the deck's structure and writing conventions, watch a narrated walkthrough of a model deck, then produce your own three-slide overview that explains the two scopes, what each enforces, and at least one example where expected behavior differs from actual product behavior.

This module introduces the four components every DLP policy is built from—locations, conditions, actions, and user override—and how each one shapes what the policy detects and how it responds. You'll learn what a sensitive information type is, how policy tips appear to users, and how a business-justification override works in practice. By the end of the module, you'll have the conceptual scaffolding needed to construct the PCI-Outbound policy in Module 2.

In this module, you'll watch a guided walkthrough of the PCI-Outbound build and test flow, then construct the policy step-by-step in a lab environment, send a test email with dummy card data, and confirm that the policy tip appears as expected in Outlook. By the end of the module, you'll have built a working DLP policy and validated it end-to-end—the exact job task as specified.

This module introduces SharePoint Online Data Access Governance reports—what they are, what they report on, where they live, and why a threshold like "five or more external users" is a meaningful triage starting point. You'll learn to read what the report indicates about external sharing patterns and recognize the boundary between what the helpdesk does with the report and what the compliance team does next.

This module is the hands-on heart of SC 15. You'll watch a guided walkthrough of the complete audit workflow, then run the DAG report yourself, filter for sites with five or more external users, export the filtered list as a CSV, and forward it to the compliance mailbox with a clear, professional cover note—mirroring the job task end to end.

This module introduces Microsoft Purview Communication Compliance: what it is, what kinds of policies generate alerts, and how the escalation chain typically works in enterprise environments. You'll learn where IT support and security operations staff fit into the workflow and what work belongs to the compliance officer or legal team. By the end of the module, you'll have the conceptual scaffolding to triage an alert with confidence about scope.

In this module you'll watch a guided walkthrough of the triage workflow, then work through a flagged Teams chat with the Coach, examining the alert in context, validating evidence, and producing a triage-level determination. You'll then document your actions in an incident tracker template and write a clear escalation note to the compliance officer, mirroring the job task from end to end.

You will produce a Data Governance Audit Brief, a professional quarterly summary that consolidates helpdesk-side data governance work for Northgate Solutions. The Brief covers your proficiency in Microsoft Purview solutions, your ability to explain how sensitivity labels and classification protect SharePoint and Teams content, and the validation of a Data Loss Prevention (DLP) policy designed to block unauthorized outbound credit-card data. Additionally, you will summarize SharePoint data-access governance reports to identify sites with excessive external users and provide a log of triaged Communication Compliance alerts, including policy violation determinations and remediation steps. You will route these findings to relevant stakeholders and document pending items for governance and compliance teams. This deliverable integrates recognition, application, and analytical skills, mirroring the quarterly summaries submitted by IT support specialists and security operations technicians at the close of an audit cycle.