Preparing for the MS-100 Microsoft 365 Identity and Services Exam (BETA)

With the retirements of Microsoft’s 70-346 and 70-347 Office 365 exams next year, it’s time to start looking at the new exams that are currently in beta. MS-100 Microsoft 365 Identity and Services is very heavily focused on technologies in the 70-346 exam, but also adds some elements from 70-347, as well as bringing in elements of the Enterprise Mobility + Security suite, primarily in the shape of Azure Active Directory Premium questions.

One of the things that is getting easier as far as content preparation sources go is that docs.microsoft.com is going to feature more prominently in your study for this exam. Instead of providing lots of links per item, I’ll start with just one or two if the articles provides enough of a launchpad to get you moving in the right direction. I’ll update it over time, so if you’ve got any suggestions let me know. I’d rather point to official documentation rather than blog posts that may not be updated, and now that large portions of the Office 365 content has moved to docs.microsoft.com we can see the latest update details for the page.

If you don’t have a test environment to help you prepare, you could set up a free Azure subscription if you need an environment to build virtual machines, and add the trials for Office 365 E5 and EMS E5 trial subscriptions. The number of virtual machines you need will be determined heavily by how you want to test out the different Azure Active Directory Connect and Active Directory Federation Services. If you are you also planning on doing MS-101 Microsoft 365 Mobility and Security exam, you might be better off downloading the Modern Desktop Deployment and Management Lab Kit from the Microsoft Evaluation Center. It’s a big download (26.5GB at time of writing) but will help with some of the additional scenarios you will need to prepare for and save a huge amount of setup time.

Design and Implement Microsoft 365 Services (25-30%)

• Manage domains
  • Add and configure additional domains
    • Add domain
  • Configure user identities for new domain name
    • Domains FAQ
  • Configure workloads for new domain name
    • DNS basics
  • Design domain name configuration
    • Can I add custom subdomains or multiple domains to Office 365?
  • Set primary domain name
    • How do I change the default domain in Office 365?
  • Verify custom domain
    • Can I pilot Office 365 with just a few email addresses from my custom domain?
• Plan a Microsoft 365 implementation
  • Plan for Microsoft 365 on-premises Infrastructure
    • Optimizing your network
    • Office 365 URLs and IP address ranges
  • Plan identity and authentication solution
    • Assign users to admin roles
    • Authentication methods
    • Understanding Office 365 identity and Azure Active Directory
• Setup Microsoft 365 tenancy and subscription
  • Configure subscription and tenant roles and workload settings
    • Hybrid identity documentation
  • Evaluate Microsoft 365 for organization
    • Base Configuration dev/test environment
  • Plan and create tenant
    • Plan your setup
    • Deployment planning checklist for Office 365
  • Upgrade existing subscriptions to Microsoft 365
    • Subscriptions, licenses, and tenants
  • Monitor license allocations
    • Manage user accounts and licenses
• Manage Microsoft 365 subscription and tenant health
  • Manage service health alerts
    • Service Health and Continuity
  • Create & manage service requests
    • Contact support for business products
  • Create internal service health response plan
    • Service Health and Continuity
  • Monitor service health
    • Service health
  • Configure and review reports, including BI, OMS, and Microsoft 365 reporting
    • Office 365 management solution in Azure
    • Activity reports and analytics
  • Schedule and review security and compliance reports
    • View the DLP reports
    • View the data governance reports
    • View ATP reports
    • Create a schedule for a report
    • Manage schedules for multiple reports
  • Schedule and review usage metrics
    • Usage analytics
• Plan migration of users and data
  • Identify data to be migrated and method
    • Migrate data to Office 365
  • Identify users and mailboxes to be migrated and method
    • Migrate email to Office 365
    • Exchange Deployment Assistant
  • Plan migration of on-prem users and groups
    • Plan for directory synchronization
  • Import PST Files
    • Overview of importing your organization PST files to Office 365

Manage User Identity and Roles (35-40%)

• Design identity strategy
  • Evaluate requirements and solution for synchronization
    • Install and run the IdFix tool
  • Evaluate requirements and solution for identity management
    • Understanding Office 365 identity and Azure Active Directory
  • Evaluate requirements and solution for authentication
    • Determine identity requirements
• Plan identity synchronization by using Azure AD Connect
  • Design directory synchronization
    • Hybrid Identity Design Considerations Overview
  • Implement directory synchronization with directory services, federation services, and Azure endpoints
    • Managing federation with Azure AD Connect
• Manage identity synchronization by using Azure AD Connect
  • Monitor Azure AD Connect Health
    • Azure AD Connect Health Operations
  • Manage Azure AD Connect synchronization
    • What is Azure AD Connect Sync?
  • Configure object filters
    • Configure filtering
  • Configure password sync
    • What is password hash synchronization?
  • Implement multi-forest AD Connect scenarios
    • Multiple forests, single Azure AD tenant
• Manage Azure AD identities
  • Plan Azure AD identities
    • What is hybrid identity?
  • Implement and manage Azure AD self-service password reset
    • Deploy self-service password reset
  • Manage access reviews
    • Manage user access with access reviews
    • Manage guest access with access reviews
  • Manage groups
    • Groups and access management
    • Group-based licensing
  • Manage passwords
    • Reset a user’s password
  • Manage product licenses
    • Manage user accounts and licenses
  • Manage users
    • Add or delete a new user
  • Perform bulk user management
    • Connect to all Office 365 services in a single Windows PowerShell window
    • Overview
• Manage user roles
  • Plan user roles
    • About admin roles
  • Allocate roles in workloads
    • Assign admin roles
  • Configure administrative accounts
    • Protect your Office 365 global administrator accounts
  • Configure RBAC within Azure AD
    • Portal
    • PowerShell
  • Delegate admin rights
    • Offer delegated administration
    • Delegate Azure AD admin roles
  • Manage admin roles
    • View and assign roles
  • Manage role allocations by using Azure AD
    • Assign users to admin roles
  • Plan security and compliance roles for Microsoft 365
    • Role security planning
    • Least-privileged roles by task

Manage Access and Authentication (20-25%)

• Manage authentication
  • Design authentication method
    • Azure Active Directory deployment plans
  • Configure authentication
    • How it works: Azure Multi-Factor Authentication
    • How it works: Azure AD self-service password reset
    • How it works: Azure Multi-Factor Authentication
  • Implement authentication method
    • Authentication Documentation
  • Manage authentication
    • Authentication methods
  • Monitor authentication
    • Sign-in logs
    • What are Azure AD reports?
    • What is Azure AD monitoring?
• Implement Multi-Factor Authentication (MFA)
  • Design an MFA solution
    • Determine multi-factor auth requirements
  • Configure MFA for apps or users
    • How modern authentication works for Office 2013 and Office 2016 client apps
    • Modern authentication
  • Administer MFA users
    • User and device settings
    • Per user MFA
  • Report MFA utilization
    • MFA Reports
• Configure application access
  • Configure application registration in Azure AD
    • Choose app type
  • Configure Azure AD application proxy
    • Enable Application Proxy
  • Publish enterprise apps in Azure AD
    • Application types
• Implement access for external users of Microsoft 365 workloads
  • Create B2B accounts
    • Admins adding B2B users
    • Information workers adding B2B users
  • Create guest accounts
    • Add guest users in the portal
    • Add guest users with PowerShell
  • Design solutions for external access
    • Understand the B2B user

Plan Office 365 Workloads and Applications (10-15%)

• Plan for Office 365 workload deployment
  • Identify hybrid requirements
    • Hybrid Modern Authentication and prereqs for Skype for Business Server and Exchange Server
    • How to configure Exchange Server on-premises to use Hybrid Modern Authentication
    • How to configure Skype for Business on-premises to use Hybrid Modern Authentication
    • Removing or disabling Hybrid Modern Authentication from Skype for Business and Exchange
  • Plan connectivity and data flow for each workload
    • Exchange Hybrid deployment prerequisites
    • Plan hybrid connectivity for Skype for Business
    • Plan SharePoint Server hybrid
  • Plan for Microsoft 365 workload connectivity
    • Network connectivity to Office 365
    • Network planning and performance tuning for Office 365
  • Plan migration strategy for workloads
• Plan Office 365 applications deployment
  • Manage Office 365 software downloads
    • Deploy Office 365 ProPlus from the cloud
    • Deploy Office 365 ProPlus from a local source
  • Plan for Office 365 apps
    • Deploy and manage mobile apps
  • Plan for Office 365 Pro plus apps updates
    • Overview of update channels
  • Plan for Office 365 Pro plus connectivity
    • Assess your environment and requirements
  • Plan for Office online
    • Office Online Service Description
  • Plan Office 365 Pro plus deployment
    • Deployment guide
    • Overview of the Office Deployment Tool