MS-4002 Prepare security and compliance to support Microsoft 365 Copilot

1 – Implement Microsoft 365 Copilot

• Get ready for Microsoft 365 Copilot
• Implement SharePoint Advanced Management tools to prepare for Microsoft 365 Copilot
• Prepare your data for searches in Microsoft 365 Copilot
• Protect your Microsoft 365 Copilot data with Microsoft 365 security tools
• Assign your Microsoft 365 Copilot licenses
• Extend Microsoft 365 Copilot
• Drive Microsoft 365 Copilot adoption throughout your organization

2 – Manage secure user access in Microsoft 365

• Examine the identity and access tools used in Microsoft 365
• Manage user passwords
• Implement Conditional Access policies
• Enable pass-through authentication
• Implement multifactor authentication
• Explore passwordless authentication options
• Explore self-service password management
• Implement Microsoft Entra Smart Lockout
• Explore Security Defaults in Microsoft Entra ID
• Investigate authentication issues using sign-in logs

3 – Manage permissions, roles, and role groups in Microsoft 365

• Examine the use of roles in the Microsoft 365 permission model
• Manage roles across the Microsoft 365 ecosystem
• Explore administrator roles in Microsoft 365
• Examine best practices when configuring administrative roles
• Assign admin roles to users in Microsoft 365
• Delegate admin roles to partners
• Implement role groups in Microsoft 365
• Manage permissions using administrative units in Microsoft Entra ID
• Manage SharePoint permissions to prevent oversharing of data
• Elevate privileges using Microsoft Entra Privileged Identity Management

4 – Deploy Microsoft 365 Apps for enterprise

• Explore Microsoft 365 Apps for enterprise functionality
• Complete a self-service installation of Microsoft 365 Apps for enterprise
• Deploy Microsoft 365 Apps for enterprise with Microsoft Configuration Manager
• Deploy Microsoft 365 Apps for enterprise from the cloud
• Deploy Microsoft 365 Apps for enterprise from a local source
• Manage updates to Microsoft 365 Apps for enterprise
• Explore the update channels for Microsoft 365 Apps for enterprise
• Manage your cloud apps using the Microsoft 365 Apps admin center
• Add Microsoft 365 Apps for enterprise to Microsoft Intune
• Deploy Microsoft 365 Apps for enterprise security baseline

5 – Implement Microsoft Purview Data Loss Prevention

• Plan to implement Microsoft Purview Data Loss Protection
• Implement Microsoft Purview’s default DLP policies
• Design a custom DLP policy
• Create a custom DLP policy from a template
• Configure email notifications for DLP policies
• Configure policy tips for DLP policies

6 – Implement sensitivity labels

• Plan your deployment strategy for sensitivity labels
• Enable sensitivity labels for files in SharePoint and OneDrive
• Examine the requirements to create a sensitivity label
• Create sensitivity labels
• Publish sensitivity labels
• Remove and delete sensitivity labels

7 – Manage Microsoft 365 Copilot extensibility

• Manage Copilot agents in integrated apps
• Create a connection between a data source and a Microsoft Graph connector
• Monitor your Microsoft Graph connectors
• Manage how Microsoft Graph connector content is displayed in Microsoft 365 Copilot