In the last post I covered the MS-100 Identity and Services exam, and this time round it’s the MS-101 Mobility and Security exam. One of the big differences I see with this exam is that the overall scope is larger, and because it includes coverage of more of the Microsoft 365 Enterprise E5 technologies it’s not likely the type of thing that many test takers would have broad exposure to just yet. That doesn’t mean you can’t get some experience though.
While you can easily sign up for an Enterprise Mobility + Security E5 trial and an Office 365 Enterprise E5 trial, a Windows 10 Enterprise E5 trial is a little trickier. What you will need to do is request a trial if Windows Defender Advanced Threat Protection here, and pair that with Windows 10 Enterprise as part of the Modern Desktop Deployment and Management Lab Kit on the Microsoft Evaluation Center. As I mentioned in the previous post, this currently weighs in at 26.5GB but it provides a huge amount of flexibility as far as testing and learning scenarios are concerned.
While I positioned the MS-100 exam as a worthy successor to the 70-346 exam, with elements of 70-347 rolled in, this exam is quite different. If someone approaches this as an updated Office 365 exam, they will struggle with large portions of the exam. While this exam does cover some of the security and compliance elements of 70-347, it goes much further, so be prepared.
Implement Modern Device Services (30-35%)
- Implement Mobile Device Management (MDM)
- Plan for MDM
- Configure MDM integration with Azure AD
- Set an MDM authority
- Set device enrollment limit for users
- Manage device compliance
- Plan for device Compliance
- Design Conditional Access Policies
- Create Conditional Access Policies
- Configure device compliance policy
- Manage Conditional Access Policies
- Plan for devices and apps
- Create and configure Microsoft Store for Business
- Plan app deployment
- Plan device co-management
- Plan device monitoring
- Plan for device profiles
- Plan for Mobile Application Management
- Plan mobile device security
- Plan Windows 10 deployment
- Plan for Windows as a Service (WaaS)
- Plan the appropriate Windows 10 Enterprise deployment method
- Analyze upgrade readiness for Windows 10
- Evaluate and deploy additional Windows 10 Enterprise security features
Implement Microsoft 365 Security and Threat Management (30-35%)
- Implement Cloud App Security (CAS)
- Configure Cloud App Security (CAS)
- Configure Cloud App Security (CAS) policies
- Configure Connected apps
- Design cloud app security (CAS) Solution
- Manage Cloud App Security (CAS) alerts
- Upload cloud app security (CAS) traffic logs
- Implement threat management
- Plan a threat management solution
- Design Azure Advanced Threat Protection (ATP) Policies
- Design Microsoft 365 ATP Policies
- Configure Azure ATP Policies
- Configure Microsoft 365 ATP Policies
- Monitor Advanced Threat Analytics (ATA) incidents
- Implement Windows Defender Advanced Threat Protection (ATP)
- Plan Windows Defender ATP Solution
- Configure preferences
- Implement Windows Defender ATP Policies
- Enable and configure security features of Windows 10 Enterprise
- Manage security reports and alerts
- Manage service assurance dashboard
- Manage tracing and reporting on Azure AD Identity Protection
- Configure and manage Microsoft 365 security alerts
- Configure and manage Azure Identity Protection dashboard and alerts
Manage Microsoft 365 Governance and Compliance (35-40%)
- Configure Data Loss Prevention (DLP)
- Configure DLP Policies
- Design data retention policies in Microsoft 365
- Manage DLP exceptions
- Monitor DLP policy matches
- Manage DLP policy matches
- Implement Azure Information Protection (AIP)
- Plan AIP solution
- Plan for deployment On-Prem rights management Connector
- Plan for Windows information Protection (WIP) implementation
- Plan for classification labeling
- Configure Information Rights Management (IRM) for Workloads
- Configure Super User
- Deploy AIP Clients
- Implement Azure Information Protection policies
- Implement AIP tenant key
- Manage data governance
- Configure information retention
- Plan for Microsoft 365 backup
- Plan for restoring deleted content
- Plan information Retention Policies
- Manage auditing
- Configure audit log retention
- Configure audit policy
- Monitor Unified Audit Logs
- Manage eDiscovery
- Search content by using Security and Compliance Center
- Plan for in-place and legal hold
- Configure eDiscovery
This one looks hard
LikeLike
That’s what she said
LikeLike
It’s not possible to use the Win10 Lab Kit to evaluate Azure ATP.
The Azure ATP Sensor requires 6GB RAM, whereas the DC1 VM provided is limited to 4GB.
LikeLike
Hi Dean – you can increase the memory that is allocated to the VMs.
LikeLike
Yep – I had tried that, but it appeared to limit me to 4096MB. Just tried again and it seems to have let me spec 6144MB, so all good.
Thanks for the write up, very useful!
LikeLike
Glad it is sorted! The first releases of this kit were very frugal with resource allocation and I always had to go in and bump up the vCPUs and memory, but now it’s only these type of situations where I even think about changes.
LikeLike
What is the exam code
LikeLike
Hi Sanka – over on https://www.microsoft.com/en-us/learning/community-blog-post.aspx?BlogId=8&Id=375171 they have MS101AmazingPjM and MS100LibertyGenius but they probably won’t work any longer “These are NOT private access codes. You can use these codes to register for the exam(s) by December 14, 2018, and you must take them on or before December 17, 2018.”
LikeLike
Hi,
I am trying to find content to study for the MS-101 exam (in 5 days =/)
This guide is very in depth, however, I am slightly confused by what I need to actually read through when I click on the links.
EG when I click a link do I have to read the entire document or just that single page you have linked too?
I appreciate your assistance!
Russell.
LikeLike
Hi Russell – sorry for the delay, it’s been a busy month with it being end of financial year down here. I hope you did well in the exam. I normally recommend reading the page, and then looking at the links on the page for any areas that might need some more attention.
LikeLike