MS-102: Microsoft 365 Administrator Apr – 2025

Skills at a glance

• Deploy and manage a Microsoft 365 tenant (25–30%)
• Implement and manage Microsoft Entra identity and access (25–30%)
• Manage security and threats by using Microsoft Defender XDR (30–35%)
• Manage compliance by using Microsoft Purview (10–15%)

Deploy and manage a Microsoft 365 tenant (25–30%)

Implement and manage a Microsoft 365 tenant

• Create a tenant
• Implement and manage domains
• Configure org settings, including Security & privacy and Organizational profile
• Monitor the health of Microsoft 365 services by using Service Health, including configuration of notifications
• Configure and review Network connectivity insights
• Configure and monitor software updates by using the Microsoft 365 admin center
• Monitor Microsoft 365 adoption and usage
• Configure and manage Microsoft 365 Backup

Manage users and groups

• Create and manage users in Microsoft Entra, including external users
• Create and manage contacts in the Microsoft 365 admin center
• Create and manage groups, including Microsoft 365 groups and shared mailboxes
• Manage and monitor Microsoft 365 licenses, including group-based licensing
• Perform bulk user management, including PowerShell

Manage roles and role groups

• Implement and manage roles in Microsoft 365 and Microsoft Entra
• Manage role groups in Microsoft Defender XDR, Microsoft Purview, and Microsoft 365 workloads
• Manage delegation by using administrative units
• Manage Microsoft Entra roles in Microsoft Entra privileged identity management (PIM)

Implement and manage Microsoft Entra identity and access (25–30%)

Implement and manage identity synchronization with Microsoft Entra tenant

• Prepare for identity synchronization, including IdFix
• Implement and manage directory synchronization by using Microsoft Entra Connect Sync or Microsoft Entra Cloud Sync
• Monitor synchronization by using Microsoft Entra Connect Health
• Troubleshoot synchronization, including Microsoft Entra Connect Sync and Microsoft Entra Cloud Sync

Implement and manage authentication

• Implement and manage authentication methods
• Implement and manage self-service password reset (SSPR)
• Implement and manage Microsoft Entra Password Protection
• Investigate and resolve authentication issues

Implement and manage secure access

• Plan for identity protection
• Implement and manage Microsoft Entra ID Protection
• Plan Conditional Access policies
• Implement and manage Conditional Access policies
• Implement and manage multi-factor authentication (MFA) by using conditional access policies

Manage security and threats by using Microsoft Defender XDR (30–35%)

Review and respond to security reports and alerts generated by Microsoft Defender XDR

• Review and respond to threats by using Exposure Management, including the Microsoft Secure Score
• Review and respond to incidents and alerts generated by Microsoft Defender XDR, including guided hunting
• Review and respond to issues identified in Microsoft Defender XDR reports
• Review and respond to threats identified by Threat intelligence

Implement and manage email and collaboration protection by using Microsoft Defender for Office 365

• Implement threat policies and rules in Microsoft Defender for Office 365
• Configure alert policies in Microsoft Defender for Office 365
• Investigate and respond to email and collaboration threats by using Microsoft Defender for Office 365
• Manage attack simulations, including training campaigns
• Manage restricted entities, including blocked users

Implement and manage endpoint protection by using Microsoft Defender for Endpoint

• Onboard devices to Defender for Endpoint
• Configure endpoint settings
• Review and respond to vulnerabilities identified in the Microsoft Defender Vulnerability Management dashboard

Implement and manage Microsoft Defender for Cloud Apps

• Configure the app connector for Microsoft 365
• Configure Microsoft Defender for Cloud Apps policies, including triggering alerts
• Interpret activity log
• Configure Cloud App Discovery
• Review and respond to issues identified in Cloud App Discovery

Manage compliance by using Microsoft Purview (10–15%)

Implement Microsoft Purview information protection and data lifecycle management

• Implement and manage sensitive information types by using keywords, keyword lists, or regular expressions
• Implement retention labels, retention label policies, and retention policies
• Implement sensitivity labels and sensitivity label policies
• Monitor label usage by using Content explorer, Activity explorer, and label reports

Implement Microsoft Purview data loss prevention (DLP)

• Configure DLP policies for Exchange, SharePoint, OneDrive, and Teams
• Configure Endpoint DLP
• Review and respond to DLP alerts, events, and reports.