Exam MS-101: Microsoft 365 Mobility and Security

Plan and implement device services (35—40%)

Plan and implement device management by using Microsoft Endpoint Manager
• plan co-management between Endpoint Configuration Manager and Intune
• plan and implement configuration profiles for Windows and MacOS clients
• plan and implement configuration profiles for iOS and Android
• review and respond to issues identified in Microsoft Endpoint Manager
Plan and implement device security and compliance by using Microsoft Endpoint Manager
• plan and implement device compliance policies
• plan and implement attack surface reduction policies
• implement and manage security baselines
• plan and configure conditional access policies for device compliance
Deploy and manage applications by using Microsoft Endpoint Manager
• plan and implement application deployment
• publish public and private applications by using Microsoft Endpoint Manager
• plan and implement application protection policies
• plan and implement application configuration policies
• monitor and troubleshoot application deployment
Plan for Windows client deployment and management
• choose Windows client deployment methods and tools based on requirements, including
Windows Autopilot, USMT, Microsoft Deployment Toolkit, and Windows Deployment
Services • plan and implement Windows subscription-based activation
• plan for Windows updates
• plan and implement additional Windows client security features
Plan and implement device enrollment
• plan and implement device join or hybrid join to Azure Active Directory (Azure AD)
• plan and implement device registration to Azure AD
• plan and implement manual and automated device enrollment into Intune
Manage security and threats by using Microsoft 365 Defender (25—30%)
Manage security reports and alerts by using the Microsoft 365 Defender portal
• review and respond to the Microsoft 365 Secure Score
• review and respond to security alerts in Microsoft 365 Defender
• review and respond to issues identified in security and compliance reports in Microsoft 365 Defender
Plan, implement, and manage email and collaboration protection by using Microsoft Defender for Office 365
• plan and implement policies and rules in Microsoft Defender for Office 365
• review and respond to issues identified in Microsoft Defender for Office 365, including threats, investigations, and campaigns
• unblock users
Plan, implement, and manage endpoint protection by using Microsoft Defender for Endpoint
Plan, implement, and manage Microsoft Defender for Cloud Apps
Manage Microsoft 365 compliance (30—35%)
Plan and implement information governance
Plan and implement information protection
Plan and implement data loss prevention (DLP)
Manage search and investigation
• configure auditing in Azure AD, including diagnostic settings

Exam MS-100: Microsoft 365 Identity and Services

Deploy and manage a Microsoft 365 tenant (15—20%)
Plan and implement a Microsoft 365 tenant
Monitor Microsoft 365 tenant health
Plan and manage user identity and roles (30—35%)
Plan identity synchronization
• design synchronization solutions for multitenant and multiforest scenarios
• evaluate whether objects should be synchronized, not synchronized, or created as cloudonly
• identify which Azure Active Directory (AD) Connect features to enable, such as writeback
and device synchronization Implement and manage identity synchronization with Azure AD
• prepare for identity synchronization by using IdFix
• configure and manage directory synchronization by using Azure AD Connect cloud sync
• configure and manage directory synchronization by using Azure AD Connect
• configure Azure AD Connect object filters
• monitor synchronization by using Azure AD Connect Health
• troubleshoot Azure AD Connect synchronization
Plan and manage Azure AD identities
• plan Azure AD identities
• create and manage users
• create and manage guest users
• create and manage groups, including Microsoft 365 groups
• manage and monitor Microsoft 365 license allocations
• perform bulk user management, including PowerShell
Plan and manage roles in Microsoft 365
• plan for role assignments
• manage roles in Microsoft 365 admin center
• manage administrative units
• plan and implement privileged identity management for Azure AD roles
Manage access and authentication (20—25%)
Plan and implement authentication
Plan and implement secure access
Plan Microsoft 365 workloads and applications (20—25%)
Plan and implement Microsoft 365 Apps deployment
• implement Microsoft 365 Apps deployment and software downloads
Plan and implement Exchange Online deployments
• plan for DNS records required by Exchange Online
• plan and implement an Exchange hybrid organization
• plan and implement mail routing, including connectors, mail flow rules, and remote
domains • plan and implement organizational settings
Plan and implement Microsoft SharePoint Online, OneDrive, and Microsoft Teams