With the retirements of Microsoft’s 70-346 and 70-347 Office 365 exams next year, it’s time to start looking at the new exams that are currently in beta. MS-100 Microsoft 365 Identity and Services is very heavily focused on technologies in the 70-346 exam, but also adds some elements from 70-347, as well as bringing in elements of the Enterprise Mobility + Security suite, primarily in the shape of Azure Active Directory Premium questions.
One of the things that is getting easier as far as content preparation sources go is that docs.microsoft.com is going to feature more prominently in your study for this exam. Instead of providing lots of links per item, I’ll start with just one or two if the articles provides enough of a launchpad to get you moving in the right direction. I’ll update it over time, so if you’ve got any suggestions let me know. I’d rather point to official documentation rather than blog posts that may not be updated, and now that large portions of the Office 365 content has moved to docs.microsoft.com we can see the latest update details for the page.
If you don’t have a test environment to help you prepare, you could set up a free Azure subscription if you need an environment to build virtual machines, and add the trials for Office 365 E5 and EMS E5 trial subscriptions. The number of virtual machines you need will be determined heavily by how you want to test out the different Azure Active Directory Connect and Active Directory Federation Services. If you are you also planning on doing MS-101 Microsoft 365 Mobility and Security exam, you might be better off downloading the Modern Desktop Deployment and Management Lab Kit from the Microsoft Evaluation Center. It’s a big download (26.5GB at time of writing) but will help with some of the additional scenarios you will need to prepare for and save a huge amount of setup time.
Design and Implement Microsoft 365 Services (25-30%)
- Manage domains
- Add and configure additional domains
- Configure user identities for new domain name
- Configure workloads for new domain name
- Design domain name configuration
- Set primary domain name
- Verify custom domain
- Plan a Microsoft 365 implementation
- Plan for Microsoft 365 on-premises Infrastructure
- Plan identity and authentication solution
- Setup Microsoft 365 tenancy and subscription
- Configure subscription and tenant roles and workload settings
- Evaluate Microsoft 365 for organization
- Plan and create tenant
- Upgrade existing subscriptions to Microsoft 365
- Monitor license allocations
- Manage Microsoft 365 subscription and tenant health
- Manage service health alerts
- Create & manage service requests
- Create internal service health response plan
- Monitor service health
- Configure and review reports, including BI, OMS, and Microsoft 365 reporting
- Schedule and review security and compliance reports
- Schedule and review usage metrics
- Plan migration of users and data
- Identify data to be migrated and method
- Identify users and mailboxes to be migrated and method
- Plan migration of on-prem users and groups
- Import PST Files
Manage User Identity and Roles (35-40%)
- Design identity strategy
- Evaluate requirements and solution for synchronization
- Evaluate requirements and solution for identity management
- Evaluate requirements and solution for authentication
- Plan identity synchronization by using Azure AD Connect
- Design directory synchronization
- Implement directory synchronization with directory services, federation services, and Azure endpoints
- Manage identity synchronization by using Azure AD Connect
- Monitor Azure AD Connect Health
- Manage Azure AD Connect synchronization
- Configure object filters
- Configure password sync
- Implement multi-forest AD Connect scenarios
- Manage Azure AD identities
- Plan Azure AD identities
- Implement and manage Azure AD self-service password reset
- Manage access reviews
- Manage groups
- Manage passwords
- Manage product licenses
- Manage users
- Perform bulk user management
- Manage user roles
- Plan user roles
- Allocate roles in workloads
- Configure administrative accounts
- Configure RBAC within Azure AD
- Delegate admin rights
- Manage admin roles
- Manage role allocations by using Azure AD
- Plan security and compliance roles for Microsoft 365
Manage Access and Authentication (20-25%)
- Manage authentication
- Design authentication method
- Configure authentication
- Implement authentication method
- Manage authentication
- Monitor authentication
- Implement Multi-Factor Authentication (MFA)
- Design an MFA solution
- Configure MFA for apps or users
- Administer MFA users
- Report MFA utilization
- Configure application access
- Configure application registration in Azure AD
- Configure Azure AD application proxy
- Publish enterprise apps in Azure AD
- Implement access for external users of Microsoft 365 workloads
- Create B2B accounts
- Create guest accounts
- Design solutions for external access
Plan Office 365 Workloads and Applications (10-15%)
- Plan for Office 365 workload deployment
- Identify hybrid requirements
- Hybrid Modern Authentication and prereqs for Skype for Business Server and Exchange Server
- How to configure Exchange Server on-premises to use Hybrid Modern Authentication
- How to configure Skype for Business on-premises to use Hybrid Modern Authentication
- Removing or disabling Hybrid Modern Authentication from Skype for Business and Exchange
- Plan connectivity and data flow for each workload
- Plan for Microsoft 365 workload connectivity
- Plan migration strategy for workloads
- Identify hybrid requirements
- Plan Office 365 applications deployment
- Manage Office 365 software downloads
- Plan for Office 365 apps
- Plan for Office 365 Pro plus apps updates
- Plan for Office 365 Pro plus connectivity
- Plan for Office online
- Plan Office 365 Pro plus deployment
