Microsoft 365 Mobility and Security (MS-101)

• Manage Security Metrics
• Implement security solutions in Microsoft 365
• Plan and configure Azure AD identity protection
• Implement Microsoft Secure Score
• Implement Exchange Online Protection
• Implement Advanced Threat Protection
• Manage Safe Attachments and Safe Links
• Implement Microsoft 365 Threat Intelligence
• Use the Microsoft 365 Security Dashboard
• Configure Advanced Threat Analytics
• Implement cloud application security
• Understand Data Governance in Microsoft 365, including: Archiving, Retention, Information Rights Management, Secure Multipurpose Internet Mail Extension (S/MIME), Office 365 Message Encryption, Data Loss Prevention
• Implement In-Place Records Management in SharePoint
• Implement archiving and retention in Exchange
• Create retention policies in the Security and Compliance Center
• Plan their security and compliance needs
• Build ethical walls in Exchange Online
• Create a DLP Policy from a built-in template
• Create a custom DLP policy
• Create a DLP policy to protect documents
• Implement policy tips
• Manage retention in email
• Troubleshoot data governance
• Implement information protection
• Implement Advanced Implementation Protection
• Understand Windows Information Protections
• Search for content in the Security and Compliance Center
• Audit log investigations
• Manage advanced eDiscovery
• Plan for Co-management
• Prepare your Windows 10 devices for Co-management
• Transition from Configuration Manager to Intune
• Configure Microsoft Store for Business
• Plan for Mobile Application Management
• Plan your Windows 10 deployment strategy
• Plan your Windows 10 subscription activation strategy
• Resolve Windows 10 upgrade errors
• Implement Windows 10 Analytics
• Deploy Mobile Device Management
• Manage devices with Mobile Device Management
• Enroll devices to Mobile Device Management
• Manage device compliance

• Completed a role-based administrator course such as Messaging, Teamwork, Security and Compliance, or Collaboration.
• A proficient understanding of DNS and basic functional experience with Microsoft 365 services.
• A proficient understanding of general IT practices.

This course is designed for persons who are aspiring to the Microsoft 365 Enterprise Admin role and have completed one of the Microsoft 365 work load administrator certification paths.

MS-101T01:  Microsoft 365 Security Management

Module 1: Designing your Microsoft 365 Tenant

Lessons

• Planning a Microsoft 365 On-premises infrastructure
• Planning Your Identity and Authentication Solution

Module 2: Configuring your Microsoft 365 Tenant

Lessons

• Planning your Microsoft 365 Experience
• Configuring your Microsoft 365 Experience
• Leveraging FastTrack and Partner Services
• Implementing Your Domain Services

Module 3: Managing your Microsoft 365 Tenant

Lessons

• Configuring Tenant Roles
• Managing Tenant Health and Services

MS-101T02:  Microsoft 365 Compliance Management

Module 1: Introduction to Data Governance in Microsoft 365

Lessons

• Introduction to Archiving in Microsoft 365
• Introduction to Retention in Microsoft 365
• Introduction to Information Rights Management
• Introduction to Secure Multipurpose Internet Mail Extension
• Introduction to Office 365 Message Encryption
• Introduction to Data Loss Prevention

Module 2: Archiving and Retention in Microsoft 365

Lessons

• In-Place Records Management in SharePoint
• Archiving and Retention in Exchange
• Retention Policies in the SCC
• Implementing Your Domain Services

Module 3: Implementing Data Governance in Microsoft 365 Intelligence

Lessons

• Planning Your Security and Compliance Needs
• Building Ethical Walls in Exchange Online
• Creating a Simple DLP Policy from a Built-in Template
• Creating a Custom DLP Policy
• Creating a DLP Policy to Protect Documents
• Working with Policy Tips

Module 4: Managing Data Governance in Microsoft 365

Lessons

• Managing Retention in Email
• Troubleshooting Data Governance
• Implementing Information Protection
• Implementing Advanced Information Protection
• Introduction to Windows Information Protection

Module 5: Managing Search and Investigations

Lessons

• Searching for Content in the Security and Compliance Center
• Auditing Log Investigations
• Managing Advanced eDiscovery

MS-101T03:  Microsoft 365 Device Management

Module 1: Planning for Device Management

Lessons

• Introduction to Co-management
• Preparing Your Windows 10 Devices for Co-management
• Transitioning from Configuration Manager to Intune
• Introduction Microsoft Store for Business
• Planning for Mobile Application Management

Module 2: Planning Your Windows 10 Deployment Strategy

Lessons

• Windows 10 Deployment Scenarios
• Planning Your Windows 10 Subscription Activation Strategy
• Resolving Windows 10 Upgrade Errors
• Introduction to Windows Analytics

Module 3: Implementing Mobile Device Management

Lessons

• Planning Mobile Device Management
• Deploying Mobile Device Management
• Enrolling Devices to MDM
• Managing Device Compliance

MS-101T01:  Microsoft 365 Security Management

Hands-On Lab

Lab : Managing Microsoft 365 Security

• Exercise 1: Setting up your lab environment
• Exercise 2: Editing an ATP Safe Links policy and create a Safe Attachment policy
• Exercise 3: Enabling and installing the ATA Center

MS-101T02:  Microsoft 365 Compliance Management

Hands-On Lab

Lab : Setting Up your Lab Environment

• Exercise 1: Initialize Compliance in Your Organization

Lab : Archiving and Retention in Microsoft 365

• Exercise 1: Configure Retention Tags and Policies
• Exercise 2: Configure AIP and WIP

Lab : Implementing Data Governance

• Exercise 1: Testing DLP Policies
• Exercise 2: Using Azure Information Protection
• Exercise 3: Using Windows Information Protection

Lab : Verify Your Data Governance Policies

• Exercise 1: Investigate your Microsoft 365 Data

MS-101T03:  Microsoft 365 Device Management

Hands-On Lab

Lab : Working with Microsoft Store for Business

• Exercise 1: Provisioning and managing the Microsoft Store for Business
• Exercise 2: Using the Microsoft Store for Business

Lab : Managing Devices by using Intune

• Exercise 1: Obtain Intune and enable device management
• Exercise 2: Configure Azure AD for Intune
• Exercise 3: Create Intune policies
• Exercise 4: Enroll a Windows 10 device

Exercise 5: Manage and monitor a device in Intune