CertBlaze

Microsoft Exam Syllabus

MS-102 syllabus, skills measured, and exam topics

The MS-102 exam measures Deploy and manage a Microsoft 365 tenant, Implement and manage Microsoft Entra identity and access, and Manage security and threats by using Microsoft Defender XDR. Use this page to review the current official syllabus, major domains, and source links before exam day.

Open the practice page

Skills measured by domain

Use the weighting table to decide where to spend the most study time.

Domain Weight
Deploy and manage a Microsoft 365 tenant 25–30%
Implement and manage Microsoft Entra identity and access 25–30%
Manage security and threats by using Microsoft Defender XDR 30–35%
Manage compliance by using Microsoft Purview 10–15%

Detailed outline

Scan each section as a working study checklist instead of one long wall of text.

Deploy and manage a Microsoft 365 tenant (25–30%)

  • Create a tenant
  • Implement and manage domains
  • Configure org settings, including Security & privacy and Organization profile
  • Monitor the health of Microsoft 365 services by using Service Health, including configuration of notifications
  • Configure and review Network connectivity insights
  • Configure and monitor software updates by using the Microsoft 365 admin center
  • Monitor Microsoft 365 adoption and usage
  • Configure and manage Microsoft 365 Backup
  • Create and manage users in Microsoft Entra ID, including external users
  • Create and manage contacts in the Microsoft 365 admin center
  • Create and manage groups, including Microsoft 365 Groups and manage shared mailboxes
  • Manage and monitor Microsoft 365 licenses, including group-based licensing

Implement and manage Microsoft Entra identity and access (25–30%)

  • Prepare for identity synchronization, including IdFix
  • Implement and manage directory synchronization by using Microsoft Entra Connect Sync or Microsoft Entra Cloud Sync
  • Monitor synchronization by using Microsoft Entra Connect Health
  • Troubleshoot synchronization, including Microsoft Entra Connect Sync and Microsoft Entra Cloud Sync
  • Implement and manage authentication methods
  • Implement and manage self-service password reset (SSPR)
  • Implement and manage Microsoft Entra Password Protection
  • Investigate and resolve authentication issues
  • Plan for identity protection
  • Implement and manage Microsoft Entra Identity Protection
  • Plan Conditional Access policies
  • Implement and manage Conditional Access policies

Manage security and threats by using Microsoft Defender XDR (30–35%)

  • Review and respond to threats by using Microsoft Security Exposure Management, including the Microsoft Secure Score
  • Review and respond to incidents and alerts generated by Microsoft Defender XDR, including advanced hunting
  • Review and respond to issues identified in Microsoft Defender XDR reports
  • Review and respond to threats identified by Microsoft Defender Threat Intelligence
  • Implement threat policies and rules in Microsoft Defender for Office 365
  • Configure alert policies in Microsoft Defender for Office 365
  • Investigate and respond to email and collaboration threats by using Microsoft Defender for Office 365
  • Manage attack simulations, including training campaigns
  • Manage restricted entities, including blocked users
  • Onboard devices to Microsoft Defender for Endpoint
  • Configure endpoint settings
  • Review and respond to vulnerabilities identified in the Microsoft Defender Vulnerability Management dashboard

Manage compliance by using Microsoft Purview (10–15%)

  • Implement and manage sensitive information types by using keywords, keyword lists, or regular expressions
  • Implement retention labels, retention label policies, and retention policies
  • Implement sensitivity labels and sensitivity label policies
  • Monitor label usage by using Content explorer, Activity explorer, and label reports
  • Configure DLP policies for Microsoft 365 workloads, including Exchange Online, SharePoint Online, OneDrive, Teams, Power BI, and Microsoft 365 Copilot
  • Configure Endpoint DLP
  • Review and respond to DLP alerts, events, and reports

Purpose of this document

  • This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.
  • Useful links: Description
  • How to earn the certification: Some certifications only require passing one exam, while others require passing multiple exams.
  • Certification renewal: Microsoft associate, expert, and specialty certifications expire annually. You can renew by passing a free online assessment on Microsoft Learn.
  • Your Microsoft Learn profile: Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
  • Exam scoring and score reports: A score of 700 or greater is required to pass.
  • Exam sandbox: You can explore the exam environment by visiting our exam sandbox.
  • Request accommodations: If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.
  • Take a free Practice Assessment: Test your skills with practice questions to help you prepare for the exam.

Updates to the exam

  • Our exams are updated periodically to reflect skills that are required to perform a role. We have included two versions of the Skills Measured objectives depending on when you are taking the exam.
  • We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. While Microsoft makes every effort to update localized versions as noted, there may be times when the localized versions of an exam are not updated on this schedule. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.
  • The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
  • Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Audience profile

  • If you’re an administrator who deploys and manages Microsoft 365 and performs Microsoft 365 tenant-level implementation and administration of cloud and hybrid environments, this exam is designed for you.
  • As a Microsoft 365 administrator, you:
  • Function as the integrating hub for all Microsoft 365 workloads.
  • Coordinate across multiple Microsoft 365 workloads.
  • Work with architects and other administrators responsible for workloads, infrastructure, identity, security, compliance, endpoints, and applications.
  • As a candidate for this exam, you have functional experience with all Microsoft 365 workloads and Microsoft Entra ID and have administered at least one of these. You should also have a working knowledge of the following:
  • Networking
  • Active Directory Domain Services
  • DNS
  • PowerShell
  • To become a Microsoft 365 Certified: Administrator Expert, you must earn at least one of the following: Microsoft 365 Certified: Endpoint Administrator Associate , Microsoft 365 Certified: Teams Administrator Associate , Microsoft Certified: Identity and Access Administrator Associate certification.