Check out the updated version of this prep guide here!
With the retirements of Microsoft’s 70-346 and 70-347 Office 365 exams next year, it’s time to start looking at the new exams that are currently in beta. MS-100 Microsoft 365 Identity and Services is very heavily focused on technologies in the 70-346 exam, but also adds some elements from 70-347, as well as bringing in elements of the Enterprise Mobility + Security suite, primarily in the shape of Azure Active Directory Premium questions.
One of the things that is getting easier as far as content preparation sources go is that docs.microsoft.com is going to feature more prominently in your study for this exam. Instead of providing lots of links per item, I’ll start with just one or two if the articles provides enough of a launchpad to get you moving in the right direction. I’ll update it over time, so if you’ve got any suggestions let me know. I’d rather point to official documentation rather than blog posts that may not be updated, and now that large portions of the Office 365 content has moved to docs.microsoft.com we can see the latest update details for the page.
If you don’t have a test environment to help you prepare, you could set up a free Azure subscription if you need an environment to build virtual machines, and add the trials for Office 365 E5 and EMS E5 trial subscriptions. The number of virtual machines you need will be determined heavily by how you want to test out the different Azure Active Directory Connect and Active Directory Federation Services. If you are you also planning on doing MS-101 Microsoft 365 Mobility and Security exam, you might be better off downloading the Modern Desktop Deployment and Management Lab Kit from the Microsoft Evaluation Center. It’s a big download (26.5GB at time of writing) but will help with some of the additional scenarios you will need to prepare for and save a huge amount of setup time.
For the latest updates to exam prep guides please check https://intunedin.net/exams
Design and implement Microsoft 365 services (25-30%)
Plan Architecture
- plan integration of Microsoft 365 and on-premises environments
- identify deployment workloads team
- plan an identity and authentication solution
- plan enterprise application modernization
Deploy a Microsoft 365 tenant
- manage domains
- configure organizational settings
- complete the organizational profile
- add a Microsoft partner or work with Microsoft FastTrack
- complete the subscription setup wizard
- plan and create a tenant
- edit an organizational profile
- plan and create subscription(s)
- configure tenant-wide workload settings
Manage Microsoft 365 subscription and tenant health
- manage service health alerts
- create & manage service requests
- create internal service health response plan
- monitor service health
- monitor license allocations
- configure and review reports, including BI, Operations Management Suite (OMS), and Microsoft 365 reporting
- schedule and review security and compliance reports
- schedule and review usage metrics
Plan migration of users and data
- identify data to be migrated and migration methods
- identify users and mailboxes to be migrated and migration methods
- plan migration of on-premises users and groups
- import PST Files
Manage user identity and roles (25-30%)
Design identity strategy
- evaluate requirements and solutions for synchronization
- evaluate requirements and solutions for identity management
- evaluate requirements and solutions for authentication
Plan identity synchronization
- design directory synchronization
- implement directory synchronization with directory services, federation services, and Azure endpoints by using Azure AD Connect
Manage identity synchronization with Azure Active Directory (Azure AD)
- configure directory synchronization by using Azure AD Connect
- monitor Azure AD Connect Health
- manage Azure AD Connect synchronization
- configure object filters
- configure password synchronization
- implement multi-forest AD Connect scenarios
Manage Azure AD identities
- plan Azure AD identities
- implement and manage self-service password reset (SSPR)
- manage access reviews
- manage groups
- manage passwords
- manage product licenses
- manage users
- perform bulk user management
Manage roles
- plan user roles
- manage admin roles
- allocate roles for workloads
- manage role allocations by using Azure AD
Manage access and authentication (15-20%)
Manage authentication
- design an authentication method
- configure authentication
- implement an authentication method
- manage authentication
- monitor authentication
Plan and implement secure access
- design a conditional access solution
- implement entitlement packages
- implement Azure AD Identity Protection
- manage identity protection
- implement conditional access
- manage conditional access
- implement and secure access for guest and external users
Configure application access
- configure application registration in Azure AD
- configure Azure AD application proxy
- publish enterprise apps in Azure AD
Plan Office 365 workloads and applications (25-30%)
Plan for Microsoft 365 Apps deployment
- plan for Microsoft connectivity
- manage Microsoft 365 Apps
- plan for Office online
- assess readiness using Microsoft analytics
- plan Microsoft 365 App compatibility
- manage Office software downloads
- plan for Microsoft 365 apps updates
Plan for messaging deployments
- plan migration strategy
- plan messaging deployment
- identify hybrid requirements
- plan for connectivity
- plan for mail routing
- plan email domains
Plan for Microsoft SharePoint Online and OneDrive for Business
- plan migration strategy
- plan external share settings
- identify hybrid requirements
- manage access configurations
- manage Microsoft groups
- manage SharePoint tenant and site settings
Plan for Microsoft Teams infrastructure
- plan for communication and call quality and capacity
- plan for Phone System
- plan Microsoft Teams deployment
- plan Microsoft Teams organizational settings
- plan for guest and external access
- plan for Microsoft Teams hybrid connectivity and co-existence
Plan Microsoft Power Platform integration
- implement Microsoft Power Platform Center of Excellence (CoE) starter kit
- plan for Power Platform workload deployments
- plan resource deployment
- plan for connectivity (and data flow)
- manage environments
- manage resources
For the latest updates to exam prep guides please check https://intunedin.net/exams
Thank you for all the hard work Mark. Configure user identities for new domain name, which part of the FAQ linked is this about?
LikeLike
Hi – from about half way down there are a few sections on changing domain names, onmicrosoft.com, multiple domain names etc https://docs.microsoft.com/en-au/office365/admin/setup/domains-faq?view=o365-worldwide#how-do-i-change-the-default-domain-in-office-365
LikeLike
Thanks Mark! Very helpful information laid out here.
LikeLike
Thanks Mark , this is a very helpful post.
LikeLike
Thanks for the post. It will really help everyone to be prepared for the exam in advance.
Appreciated for your effort and to share this useful information.
LikeLike
Thanks Rohit!
LikeLike
You have provide good information and every students of MS-100 cab easily understand. Thanks for shearing.
LikeLike
Many thank Marc, it’ll really help me
LikeLike
Hi Mark. This is great information for the new exam when there is little study material for the new format.
I noted one of the links (Authentication methods) seems broken. Is it possible to correct this.
Thanks.
LikeLike
Thanks – fixed it now!
LikeLike
Wow what a great post
LikeLike
Passed! Thanks Mark
LikeLike