Microsoft MS-101: Exam Topics

This Microsoft test will measure the skills and knowledge of the candidates in selected technical areas. These skills can be found in the objectives of the certification exam. So, Microsoft MS-101 covers the following domains:

Implementing Modern Device Services: 30-35%

• Implementing MDM (Mobile Device Management): this skill area will evaluate the ability of the students to plan for Mobile Device Management, customize the integration of MDM with Azure Active Directory, and set device enrollment restrictions for the users.
• Planning Windows 10 Deployment: the examinees should be able to demonstrate their expertise in planning for Windows as a Service; planning the relevant deployment methods for Windows 10 Enterprise; evaluating and deploying additional security features for Windows 10.
• Managing the Device Compliance: this domain will measure your competence in planning for device compliance; designing, creating, and managing Conditional Access Policies; configuring the device compliance policy.
• Planning for Apps & Devices: this topic requires the individuals’ skills in creating and configuring Microsoft Store for Business; planning app deployment, device co-management, device monitoring, device profiles, mobile device security, and Mobile Application Management.

Implementing Microsoft 365 Threat Management & Security: 30-35%

• Implementing Microsoft Defender ATP (Advanced Threat Protection): this objective covers one’s skills in planning Microsoft Defender ATP solutions; configuring preferences; implementing the Microsoft Defender ATP policies; allowing and configuring the security features associated with Windows 10 Enterprise.
• Implementing Threat Management: this section requires one’s competence in planning threat management solutions; designing ATP implementation; designing Microsoft 365 ATP policies; configuring Azure ATP and Microsoft 365 ATP Policies; monitoring ATA incidents.
• Managing Security Alerts & Reports: the learners are required to demonstrate their expertise in managing service assurance dashboards, tracking and reporting Azure Active Directory Identity Protection, and configuring and managing Microsoft 365 security alerts and Azure Identity Protection alerts & dashboards.
• Implementing CAS (Cloud App Security): the candidates should have competence in configuring CAS, CAS Policies, CAS Solution, CAS Alerts, CAS traffic logs, as well as connected apps.

Reference: https://www.microsoft.com/en-us/learning/exam-ms-101.aspx

Exam Topics and Their Details

The content of the Microsoft MS-101 exam revolves around three domains that are enumerated below:

• Implement Modern Device Services (30-35%)

  This subject area requires one’s skills in executing Mobile Device Management (for example, planning for MDM; customizing integration of MDM and Azure AD; setting the device limit for enrollment of the users); handling device compliance (planning for device compliance; developing Conditional Access Policies; developing Conditional Access Policies; customizing policy for device compliance; handling Conditional Access Policies); plan for apps and devices (in particular, designing and customizing Microsoft Store for Business; planning app deployment; planning device joint management; plan device monitoring; planning for device profiles; planning for Mobile Application Management; planning for Windows as a Service; planning the relevant deployment approach for Windows 10 Enterprise; assessing upgrade readiness for Windows 10 with the help of Desktop Analytics; assessing and deploying extra security features of Windows 10 Enterprise).

• Manage Microsoft 365 Governance and Compliance (35-40%)

  This topic encompasses the skills, such as customizing Data Loss Prevention (in particular, customizing DLP policies; developing data retention policies within Microsoft 365; handling DLP exceptions; DLP policy matchings; handling DLP policy matching); applying sensitivity labels (in particular, planning for sensitivity labels; developing sensitivity labels; utilizing sensitivity labels on OneDrive and SharePoint; planning for Windows information Protection (WIP) implementation); handling data governance (in particular, customizing information retention; planning for Microsoft 365 backup; planning for recovering the deleted content; planning information preservation policies); handling auditing (in particular, customizing audit log preservation; customizing audit policy; monitoring Unified Audit Logs); handling eDiscovery (in particular, searching content with the help of Security and Compliance Center; planning for legal and in-place hold; customizing eDiscovery and develop cases).

• Implement Microsoft 365 Security and Threat Management (30-35%)

  Within this objective, the candidates need to demonstrate their ability to apply Cloud App Security (this includes customizing CAS; customizing CAS policies; customizing Connected apps; developing CAS Solution handling CAS alerts; uploading CAS traffic logs); execute threat management (this comes with planning a threat management approach; developing Azure Advanced Threat Protection (ATP) implementation; developing policies for Microsoft 365 ATP; developing Azure ATP; customizing Microsoft 365 ATP policies; monitoring Advanced Threat Analytics incidents).

  In addition, the examinees should have competency in executing Microsoft Defender Advanced Threat Protection (planning a Microsoft Defender ATP approach; customizing preferences; executing Microsoft Defender ATP policies; customizing Windows 10 Enterprise security features); handling security alerts and reports (handling a service assurance dashboard; handling reporting and tracing within Azure AD Identity Protection; customizing and handling Microsoft 365 security alerts; customizing and handling Azure Identity Protection alerts and dashboard).