Exam MS-101: Microsoft 365 Mobility and Security
MS-101: Microsoft 365 Mobility and Security exam is for Enterprise Administrators who take part in evaluating, planning, migrating, deploying, and managing Microsoft 365 services. These enterprise administrators are responsible to perform Microsoft 365 tenant management tasks for an enterprise, including its identities, security, compliance, and supporting technologies.
Who should take the exam?
- Candidates should have a working knowledge of Microsoft 365 workloads and should have been an administrator for at least one Microsoft 365 workload (Exchange, SharePoint, Skype for Business, or Windows as a Service).
- Candidates also have a working knowledge of networking, server administration, and IT fundamentals such as DNS, Active Directory, and PowerShell.
Exam Format
- The Microsoft MS-101 exam questions will range between 40-60 which must be completed within a time frame of 180 minutes.
- The exam is available in only two languages. Further, these include- English and Japanese.
- So, make sure that you’re well versed with at least one of the languages mentioned above.
- As far as the registration fee is concerned it’s USD 165 without taxes. And, in the case of passing score, one requires 700 or more in order to pass the exam.
How to schedule the exam?
MS-101: Microsoft 365 Mobility and Security certification exam measures your ability to accomplish the following technical tasks: implement modern device services; implement Microsoft 365 security and threat management, and manage Microsoft 365 governance and compliance.
Candidates can schedule the exam with the Pearson VUE.
Check: MS-101: Microsoft 365 Mobility and Security Interview Questions
Exam Detailed Course Outline
Let’s briefly look at the course outline of the Microsoft MS-101 certification exam.
The course outline for the Microsoft MS-101 exam was updated on November 2, 2022.
1. Plan and implement device services (35—40%)
1.1 Plan and implement device management by using Microsoft Endpoint Manager
- plan co-management between Endpoint Configuration Manager and Intune (Microsoft Documentation: co-management)
- plan and implement configuration profiles for Windows and MacOS clients (Microsoft Documentation: Create a device profile in Microsoft Intune)
- plan and implement configuration profiles for iOS and Android (Microsoft Documentation: Apply features and settings on your devices, Create a device profile in Microsoft Intune)
- review and respond to issues identified in Microsoft Endpoint Manager (Microsoft Documentation: Use Intune to remediate vulnerabilities)
1.2 Plan and implement device security and compliance by using Microsoft Endpoint Manager
- plan and implement device compliance (Microsoft Documentation: Use compliance policies to set rules)
- plan and implement for attack surface reduction (Microsoft Documentation: Configure attack surface reduction, Attack surface reduction)
- implement and manage security baselines (Microsoft Documentation: Use security baselines, Windows MDM security baseline)
- plan and configure conditional access policies for device compliance (Microsoft Documentation: Plan a Conditional Access deployment)
1.3 Deploy and manage applications by using Microsoft Endpoint Manager
- plan and implement application deployment (Microsoft Documentation: Create and deploy an application with Configuration Manager)
- publish public and private applications by using Microsoft Endpoint Manager (Microsoft Documentation: Getting started with Microsoft Endpoint Manager)
- plan and implement application protection policies (Microsoft Documentation: App protection policies overview)
- plan and implement application configuration policies
- monitor and troubleshoot application deployment (Microsoft Documentation: Deployment Monitoring Tool)
1.4 Plan for Windows client deployment and management
- choose Windows client deployment methods and tools based on requirements, including Windows Autopilot, USMT, Microsoft Deployment Toolkit, and Windows Deployment Services (Microsoft Documentation: Get started with MDT, Windows 10 deployment scenarios and tools)
- plan and implement Windows subscription-based activation (Microsoft Documentation: Windows 10/11 Subscription Activation)
- plan for Windows updates (Microsoft Documentation: Prepare servicing strategy for Windows client updates)
- plan and implement additional Windows client security features (Microsoft Documentation: Security baselines)
1.5 Plan and implement device enrollment
- plan and implement device join or hybrid join to Azure AD (Microsoft Documentation: Plan your hybrid Azure Active Directory join implementation)
- plan and implement device registration to Azure AD (Microsoft Documentation: Plan your Azure Active Directory device deployment)
- plan and implement manual and automated device enrollment into Intune (Microsoft Documentation: Set up enrollment for Windows devices)
2. Manage security and threats by using Microsoft 365 Defender (25— 30%)
2.1 Manage security reports and alerts by using the Microsoft 365 Defender portal
- review and respond to Microsoft 365 Secure Score (Microsoft Documentation: What is Microsoft Secure Score? Assess your security posture)
- review and respond to security alerts in Microsoft 365 Defender (Microsoft Documentation: Alerts in the Security & Compliance Center)
- review and respond to issues identified in security and compliance reports in Microsoft 365 Defender (Microsoft Documentation: Security dashboard in the Security & Compliance Center)
2.2 Plan, implement, and manage email and collaboration protection by using Microsoft Defender for Office 365
- plan and implement policies and rules in Microsoft Defender for Office 365 (Microsoft Documentation: Preset security policies in EOP and Microsoft Defender for Office 365)
- review and respond to issues identified in Microsoft Defender for Office 365, including threats, investigations, and campaigns (Microsoft Documentation: Investigate incidents in Microsoft 365 Defender, Review and manage remediation actions in Office 365)
- unblock users (Microsoft Documentation: Remove blocked users from the Restricted users portal in Microsoft 365)
2.3 Plan, implement, and manage endpoint protection by using Microsoft Defender for Endpoint
- plan Microsoft Defender for Endpoint (Microsoft Documentation: Microsoft Defender for Endpoint)
- onboard devices to Microsoft Defender for Endpoint (Microsoft Documentation: Onboard devices and configure Microsoft Defender for Endpoint capabilities)
- configure Microsoft Defender for Endpoint settings (Microsoft Documentation: Switch to Microsoft Defender for Endpoint – Phase 2)
- review and respond to endpoint vulnerabilities (Microsoft Documentation: Track and respond to emerging threats through threat analytics)
- review and respond to risks on devices (Microsoft Documentation: Review detected threats)
- review and respond to exposure score (Microsoft Documentation: Exposure score in Defender Vulnerability Management)
2.4 Plan, implement, and manage Microsoft Defender for Cloud Apps
- configure the application connector for Office 365 (Microsoft Documentation: set up a multifunction device or application)
- plan and configure Microsoft Defender for Cloud Apps policies (Microsoft Documentation: Get started with Microsoft Defender for Cloud Apps)
- review and respond to Microsoft Defender for Cloud Apps alerts (Microsoft Documentation: Manage alerts)
- review and respond to activity log (Microsoft Documentation: Azure Monitor activity log)
- configure Cloud App Discovery (Microsoft Documentation: Set up Cloud Discovery)
- review and respond to issues identified in Cloud App Discovery (Microsoft Documentation: new in Microsoft Defender for Cloud Apps)
3. Manage Microsoft 365 compliance (30—35%)
3.1 Plan and implement information governance
- plan and implement retention labels and label policies (Microsoft Documentation: Learn about retention policies and retention labels)
- recover deleted data in Exchange Online and SharePoint Online (Microsoft Documentation: Recover deleted messages in a user’s mailbox in Exchange Online)
- implement records management (Microsoft Documentation: Learn about records management)
3.2 Plan and implement information protection
- plan and implement data classification (Microsoft Documentation: Learn about data classification)
- plan and implement sensitivity labels and policies (Microsoft Documentation: Create and configure sensitivity labels and their policies)
- optimize label usage by using Content Explorer, Activity Explorer, and label reports (Microsoft Documentation: Get started with activity explorer)
3.3 Plan and implement data loss prevention (DLP)
- plan and implement DLP for workloads (Microsoft Documentation: Learn about data loss prevention)
- plan and implement Microsoft 365 Endpoint DLP (Microsoft Documentation: Get started with Endpoint data loss prevention)
- review and respond to DLP alerts, events, and reports (Microsoft Documentation: Configure and view alerts for data loss prevention polices)
3.4 Manage search and investigation
- configure auditing in Azure AD, including diagnostic settings(Microsoft Documentation: Integrate Azure AD logs with Azure Monitor logs)
- plan and configure audit retention policies for Microsoft 365 (Microsoft Documentation: Manage audit log retention policies)
- retrieve and interpret audit logs for workloads (Microsoft Documentation: Use audit logs to track and monitor events in Microsoft Intune)
- plan and configure eDiscovery and Advanced eDiscovery (Microsoft Documentation: Microsoft Purview eDiscovery solutions)
- specify a Content Search based on requirements (Microsoft Documentation: Create a content search)
Exam Policies
Microsoft is solely responsible to provide exam policies with a view to enabling the candidates to plan and manage a positive outcome. Microsoft Certification exam policies are an appropriate blend of all the exam-related details, accompanying the before and after exam procedures. These exam policies are the inclusion of certain rules that need to be followed during the exam time or at testing centres.
For More Queries Visit : MS-101: Microsoft 365 Mobility and Security
Microsoft MS-101 Exam Preparation Resources
Learning Resource 1: Microsoft Documentation
Microsoft offers Microsoft documentation that contains different learning pages. By using Microsoft documentation you can easily understand Microsoft azure expert’s solution DevOps fundamentals. Microsoft documentation helps you understand different scales of different azure services in a much detailed manner. This will make sure that you are working by the clock and learning so much new to azure technologies offered by industry experts directly to you.
Learning Resource 2: Instructor Led Training
Microsoft provides you with both online as well as instructor-led training. These instructor-led training courses are basically on-demand classroom sessions that you can easily arrange anywhere and anytime according to your convenience. These Microsoft MS-101 training sessions help you gain an upper hand in the MS-101 exam. So the moment you are able to find a Microsoft training partner, now you just have to head towards their website for booking training sections.
Learning Resource 3: Online Forums
The idea to get yourself enrolled in any study group or forum is completely subjective, implying that online forums are not mandatory but an option. Candidates preparing for the MS-101 exam can join any study group and forums to boost their confidence. Online forums are best as they connect you to all other people who are also going through the same journey as yours. You can always ask a question related to the topic you’re having difficulty with or simply can help the other candidates.
Learning Resource 4: Books and Periodicals
Books are your oldest yet the most efficient medium to study from. They help you acquire knowledge in a clear and detailed manner which helps you understand the basics of the exam topics. Also, the market is flooded with books and periodicals which you can refer to the study for the exam. Following are the few Microsoft MS-101 course exam books which can support and guide your preparation process:
- Microsoft 365 Mobility And Security – Exam Ref Ms-101
- Microsoft 365 Mobility And Security – Exam Guide Ms-101 by Nate Chamberlain
Learning Resource 5: Practice Tests
After you’ve completed your preparation phase, you’ll move on to the performance phase. This phase is also known as the self-evaluation phase since it assists you in identifying your essential strengths and weaknesses. Remember that you may only begin taking practice tests when you have completed the whole course. Microsoft MS-101 exam practice tests are created in such a way that they allow students to experience the real-world exam situation.
