Check out the latest version of this exam prep guide here.
In the last post I covered the MS-100 Identity and Services exam, and this time round it’s the MS-101 Mobility and Security exam. One of the big differences I see with this exam is that the overall scope is larger, and because it includes coverage of more of the Microsoft 365 Enterprise E5 technologies it’s not likely the type of thing that many test takers would have broad exposure to just yet. That doesn’t mean you can’t get some experience though.
While you can easily sign up for an Enterprise Mobility + Security E5 trial and an Office 365 Enterprise E5 trial, a Windows 10 Enterprise E5 trial is a little trickier. What you will need to do is request a trial if Windows Defender Advanced Threat Protection here, and pair that with Windows 10 Enterprise as part of the Modern Desktop Deployment and Management Lab Kit on the Microsoft Evaluation Center. As I mentioned in the previous post, this currently weighs in at 26.5GB but it provides a huge amount of flexibility as far as testing and learning scenarios are concerned.
While I positioned the MS-100 exam as a worthy successor to the 70-346 exam, with elements of 70-347 rolled in, this exam is quite different. If someone approaches this as an updated Office 365 exam, they will struggle with large portions of the exam. While this exam does cover some of the security and compliance elements of 70-347, it goes much further, so be prepared.
For the latest updates to exam prep guides please check https://intunedin.net/exams
Implement Modern Device Services (40-45%)
Plan device management
- plan device monitoring
- plan Microsoft Endpoint Manager implementation and integration with Azure AD
- plan for configuration profiles
Manage device compliance
- plan for device compliance
- plan for attack surface reduction
- configure security baselines
- configure device compliance policy
- plan and configure conditional access policies
Plan for apps
- create and configure Microsoft Store for Business
- plan app deployment
- plan for mobile application management (MAM)
Plan Windows 10 deployment
- plan for Windows as a Service (WaaS)
- plan for managing Windows quality and feature updates
- plan Windows 10 Enterprise deployment methods
- analyze upgrade readiness for Windows 10 by using services such as Desktop Analytics
- evaluate and deploy additional Windows 10 Enterprise security features
Enroll devices
- plan for device join to Azure Active Directory (Azure AD)
- plan for manual and automated device enrollment
- enable device enrollment
Implement Microsoft 365 Security and Threat Management (20-25%)
Manage security reports and alerts
- evaluate and manage Microsoft Office 365 tenant security by using Secure Score
- manage incident investigation
- review and manage Microsoft 365 security alerts
Plan and implement threat protection with Microsoft Defender
- plan Microsoft Defender for Endpoint
- design Microsoft Defender for Office 365 policies
- implement Microsoft Defender for Identity
Plan Microsoft Cloud App Security
- plan information protection by using Cloud App Security
- plan policies to manage access to cloud apps
- plan for application connectors
- configure Cloud App Security policies
- review and respond to Cloud App Security alerts
- monitor for unauthorized cloud applications
Manage Microsoft 365 Governance and Compliance (35-40%)
Plan for compliance requirements
- plan compliance solutions
- assess compliance
- plan for legislative and regional or industry requirements and drive implementation
Manage information governance
- plan data classification
- plan for classification labeling
- plan for restoring deleted content
- implement records management
- design data retention labels and policies in Microsoft 365
Implement Information protection
- plan an information protection solution
- plan and implement sensitivity labels and policies
- monitor label alerts and analytics
- deploy Azure Information Protection unified labels clients
- configure Information Rights Management (IRM) for workloads
- plan for Windows information Protection (WIP) implementation
Plan and implement data loss prevention (DLP)
- plan for DLP
- configure DLP policies
- monitor DLP
Manage search and investigation
- plan for auditing
- plan for eDiscovery
- implement insider risk management
- design a Content Search solution
For the latest updates to exam prep guides please check https://intunedin.net/exams
intunedin.net 
This one looks hard
LikeLike
That’s what she said
LikeLike
It’s not possible to use the Win10 Lab Kit to evaluate Azure ATP.
The Azure ATP Sensor requires 6GB RAM, whereas the DC1 VM provided is limited to 4GB.
LikeLike
Hi Dean – you can increase the memory that is allocated to the VMs.
LikeLike
Yep – I had tried that, but it appeared to limit me to 4096MB. Just tried again and it seems to have let me spec 6144MB, so all good.
Thanks for the write up, very useful!
LikeLike
Glad it is sorted! The first releases of this kit were very frugal with resource allocation and I always had to go in and bump up the vCPUs and memory, but now it’s only these type of situations where I even think about changes.
LikeLike
What is the exam code
LikeLike
Hi Sanka – over on https://www.microsoft.com/en-us/learning/community-blog-post.aspx?BlogId=8&Id=375171 they have MS101AmazingPjM and MS100LibertyGenius but they probably won’t work any longer “These are NOT private access codes. You can use these codes to register for the exam(s) by December 14, 2018, and you must take them on or before December 17, 2018.”
LikeLike
Hi,
I am trying to find content to study for the MS-101 exam (in 5 days =/)
This guide is very in depth, however, I am slightly confused by what I need to actually read through when I click on the links.
EG when I click a link do I have to read the entire document or just that single page you have linked too?
I appreciate your assistance!
Russell.
LikeLike
Hi Russell – sorry for the delay, it’s been a busy month with it being end of financial year down here. I hope you did well in the exam. I normally recommend reading the page, and then looking at the links on the page for any areas that might need some more attention.
LikeLike
Will this post be updated for end of 2019 / beginning of 2020?
LikeLike
Hi Lewis – I’ll be doing an update for MS-500 soon and then working through the others, but after doing a quick comparison of the beta objectives and the current objectives over a year later it doesn’t look like they have changed on MS-101, but there have certainly been enough changes in the portals for me to go back and see if there are some better links on docs than I’ve got listed.
LikeLike
Greatt blog you have here
LikeLike