Study guide for the Applied Skills assessment lab: Prepare security and compliance to support Microsoft 365 Copilot

Purpose of this document

This study guide provides a summary of the topics covered in the assessment lab, along with additional resources to help you prepare. Note that the learning path on the credential details page may include more modules than the "Tasks performed" to provide a cohesive learning experience.

Tasks at a glance

Prepare your Microsoft 365 environment to support Microsoft 365 Copilot

• Configure Copilot-related settings in Microsoft Defender for Office 365, including preset security policies and analytics

• Configure Copilot-related settings in Microsoft Defender for Cloud Apps, including OAuth policies, file monitoring, information protection, and app access

• Configure Copilot access to Microsoft Graph connectors and plug-ins

• Select an appropriate Microsoft 365 Apps channel

• Configure tenant-level settings for Copilot for Office 365, including Microsoft Edge browser settings and unified audit log, and enable Microsoft Copilot

  Supporting module (s):

  • [Implement threat protection by using Microsoft Defender for Office 365]https://learn.microsoft.com/training/modules/implement-threat-protection-use-microsoft-defender-office-365/)

Configure identity governance to support Microsoft 365 Copilot

• Configure security defaults

• Create and configure Conditional Access policies to support Microsoft 365 Copilot

• Configure access to Copilot, including users, groups, privileged access, and access reviews

  Supporting module (s):

  • Manage secure user access in Microsoft 365

Configure device management to support Microsoft 365 Copilot

• Create and manage configuration profiles for endpoint security to support Microsoft 365 Copilot

• Create and manage compliance policies for Microsoft Intune to support Microsoft 365 Copilot

• Configure endpoint protection policies for Microsoft Defender for Endpoint to support Microsoft 365 Copilot

• Configure app protection and app configuration policies in Intune to support Microsoft Defender for Endpoint to support Microsoft 365 Copilot

• Configure security baselines in Intune to support Microsoft Defender for Endpoint to support Microsoft 365 Copilot

  Supporting module (s):

  • Implement endpoint protection by using Microsoft Defender for Endpoint

Configure and manage compliance settings for Microsoft 365 Copilot

• Configure data retention to govern Microsoft 365 Copilot

• Configure and manage sensitive data, including sensitivity labels, sensitivity policies, and sensitivity information types

• Apply sensitivity labels to Microsoft 365 Groups and SharePoint sites

• Manage Microsoft Word export features

  Supporting module (s):

  • Explore retention in Microsoft 365

  • Implement Microsoft Purview Data Loss Prevention

  • Implement sensitivity labels

Configure and manage access to information by Microsoft 365 Copilot

• Configure tenant sharing settings for SharePoint and OneDrive

• Configure permissions for SharePoint sites

• Add and remove users from a SharePoint site or Microsoft 365 Group

• Configure search to exclude sites from indexing

• Configure SharePoint site access reviews

• Configure transcription settings in Microsoft Teams meeting policies

• Manage visibility settings for a Microsoft Teams team

  Supporting module (s):

  • Implement Microsoft Purview Information Barriers