MS-102: Microsoft 365 Administrator Exam Resource Guide (April 2024 Update)

MS-102 just received a very minor update to reflect recent name changes of some of the technologies it includes due to Microsoft Defender XDR replacing references to Microsoft 365 Defender. That’s it! An easy update for this one.

Deploy and manage a Microsoft 365 tenant (25–30%)

Implement and manage a Microsoft 365 tenant

• Create a tenant
  • Plan your setup
  • Try or buy Microsoft 365
• Implement and manage domains
  • Add domain
  • Can I pilot Microsoft 365 with just a few email addresses from my custom domain?
  • Domains FAQ
  • DNS basics
  • Can I add custom subdomains or multiple domains to Microsoft 365?
  • How do I change the default domain in Microsoft 365?
• Configure organizational settings, including security, privacy, and profile
  • Customize your organization theme
  • Customize Sign-in page
  • Change your organization’s address, technical contact, and more
  • About the Microsoft 365 admin center
• Identify and respond to service health issues
  • Service Health and Continuity
• Configure notifications in service health
  • Service health
• Monitor adoption and usage
  • Activity reports and analytics

Manage users and groups

• Create and manage users
  • Add or delete a new user
  • Reset a user’s password
• Create and manage guest users
  • Add guest users to your directory in the Azure portal
  • Add a guest user with PowerShell
• Create and manage contacts
  • Manage mail contacts
• Create and manage groups, including Microsoft 365 groups
  • Overview of Microsoft 365 Groups for administrators
  • Groups and access management
• Manage and monitor Microsoft 365 license allocations
  • Manage user accounts and licenses
  • Group-based licensing
• Perform bulk user management, including PowerShell
  • Connect to all Microsoft 365 services in a single Windows PowerShell window
  • Overview

Manage roles in Microsoft 365

• Manage roles in Microsoft 365 and Microsoft Entra
  • View and assign roles
  • Assign admin roles
  • Assign users to admin roles
• Manage role groups for Microsoft Defender XDR, Microsoft Purview, and Microsoft 365 workloads
  • Roles and role groups in the Defender for Office 365 and Purview compliance
• Manage delegation by using administrative units
  • Administrative units
• Implement privileged identity management for Microsoft Entra roles
  • Deploy PIM
  • Assign Microsoft Entra roles in PIM
  • What is Privileged Identity Management?

Implement and manage Microsoft Entra identity and access (25–30%)

Implement and manage identity synchronization with Microsoft Entra tenant

• Prepare for identity synchronization by using IdFix
  • Install and run the IdFix tool
• Implement and manage directory synchronization by using Microsoft Entra Connect cloud sync
  • Microsoft Entra Connect Sync: Understand and customize synchronization
  • Cloud sync configuration
• Implement and manage directory synchronization by using Microsoft Entra Connect
  • Set up directory synchronization for Microsoft 365
• Monitor synchronization by using Microsoft Entra Connect Health
  • Microsoft Entra Connect Health operations
• Troubleshoot synchronization, including Microsoft Entra Connect and Microsoft Entra Connect cloud sync
  • Errors during synchronization

Implement and manage authentication

• Implement and manage authentication methods, including Windows Hello for Business, passwordless, tokens, and the Microsoft Authenticator app
  • Authentication methods
  • Windows Hello for Business Deployment Overview
• Implement and manage self-service password reset (SSPR)
  • Self-service password reset deep dive
  • Deploy self-service password reset
• Implement and manage Microsoft Entra Password Protection
  • Password protection in Microsoft Entra ID
  • Prevent attacks using smart lockout
• Implement and manage multi-factor authentication (MFA)
  • Determine multi-factor auth requirements
  • Microsoft Entra multifactor authentication overview
• Investigate and resolve authentication issues
  • Sign-in logs
  • What is Microsoft Entra monitoring and health?

Implement and manage secure access

• Plan for identity protection
  • What is Identity Protection?
• Implement and manage Microsoft Entra ID Protection
  • Configure the user risk policy
  • Configure the sign-in risk policy
  • Simulate risk events
• Plan Conditional Access policies
  • Common ways to use conditional access
• Implement and manage Conditional Access policies
  • Create and assign conditional access policy
  • Create a device compliance policy
  • Monitor conditional access

Manage security and threats by using Microsoft Defender XDR (25– 30%)

Manage security reports and alerts by using the Microsoft Defender portal

• Review and take actions to improve the Microsoft Secure Score in the Microsoft Defender portal
  • Secure score and security controls
• Review and respond to security incidents and alerts in Microsoft Defender XDR
  • Investigate alerts in Microsoft 365 Defender
• Review and respond to issues identified in security and compliance reports in Microsoft Defender XDR
  • Overview
  • Manage incidents
• Review and respond to threats identified in threat analytics
  • Threat analytics in Microsoft 365 Defender

Implement and manage email and collaboration protection by using Microsoft Defender for Office 365

• Implement policies and rules in Defender for Office 365
  • Set up anti-phishing and Microsoft Defender for Office 365 anti-phishing policies
  • Set up Microsoft Defender for Office 365 Safe Attachments policies
  • Set up Microsoft Defender for Office 365 Safe Links policies
• Review and respond to threats identified in Defender for Office 365, including threats and investigations
  • View and read your Microsoft Defender for Office 365 reports
• Create and run campaigns, such as attack simulation
  • Attack Simulator in Microsoft Defender for Office 365
• Unblock users
  • Remove blocked users

Implement and manage endpoint protection by using Microsoft Defender for Endpoint

• Onboard devices to Defender for Endpoint
  • Set up Microsoft Defender for Endpoint deployment
  • Onboard devices to the service
• Configure Defender for Endpoint settings
  • Configure capabilities of the service
  • Configure conditional access
  • Enable Microsoft Defender for Cloud Apps in Microsoft Defender for Endpoint
• Review and respond to endpoint vulnerabilities
  • Endpoint detection and response overview
• Review and respond to risks identified in the Microsoft Defender Vulnerability Management dashboard
  • Investigate devices

Manage compliance by using Microsoft Purview (15–20%)

Implement Microsoft Purview information protection and data lifecycle management

• Implement and manage sensitive info types by using keywords, keyword lists, or regular expressions
  • Learn about sensitive information types
  • Customize a built-in sensitive information type
  • Create custom sensitive information types with Exact Data Match based classification
• Implement retention labels, retention label policies, and retention policies
  • Retention policies and labels
• Implement sensitivity labels and sensitivity label policies
  • Learn about sensitivity labels
  • Create and publish sensitivity labels
  • Enable sensitivity labels for Office files in SharePoint and OneDrive
  • Retention policies and labels

Implement Microsoft Purview data loss prevention (DLP)

• Implement DLP for workloads
  • Learn about data loss prevention
• Implement Endpoint DLP
  • Create a DLP policy from a template
  • Create, test, and tune a DLP policy
• Review and respond to DLP alerts, events, and reports
  • View the DLP reports
  • What the DLP functions look for