Microsoft 365 Mobility and Security

 

Candidates for this exam are Microsoft 365 enterprise administrators who have expert-level skills in evaluating, planning, migrating, deploying, and managing Microsoft 365. They perform Microsoft 365 tenant-level planning, implementation, and administration of cloud and hybrid enterprise environments. Candidates for this exam have subject matter expertise in Microsoft 365 endpoints, security, and compliance. The enterprise administrator functions as the integrating hub for all Microsoft 365 workloads. This role coordinates across multiple Microsoft 365 workloads and advises the architects and workload administrators.
 

Candidates for this exam have functional experience with all Microsoft 365 workloads and Azure Active Directory and have administered at least one of these. They also have a working knowledge of networking, server administration, DNS, and PowerShell.
 

Plan and implement device services (35—40%) Plan and implement device management by using Microsoft Endpoint Manager

• plan co-management between Endpoint Configuration Manager and Intune
• plan and implement configuration profiles for Windows and MacOS clients
• plan and implement configuration profiles for iOS and Android
• review and respond to issues identified in Microsoft Endpoint Manager

Plan and implement device security and compliance by using Microsoft Endpoint Manager

• plan and implement device compliance policies
• plan and implement attack surface reduction policies
• implement and manage security baselines
• plan and configure conditional access policies for device compliance

Deploy and manage applications by using Microsoft Endpoint Manager

• plan and implement application deployment
• publish public and private applications by using Microsoft Endpoint Manager
• plan and implement application protection policies
• plan and implement application configuration policies
• monitor and troubleshoot application deployment

Plan for Windows client deployment and management

• choose Windows client deployment methods and tools based on requirements, including Windows Autopilot, USMT, Microsoft Deployment Toolkit, and Windows Deployment Services
• plan and implement Windows subscription-based activation
• plan for Windows updates
• plan and implement additional Windows client security features

Plan and implement device enrollment

• plan and implement device join or hybrid join to Azure Active Directory (Azure AD)
• plan and implement device registration to Azure AD
• plan and implement manual and automated device enrollment into Intune

Manage security and threats by using Microsoft 365 Defender (25—30%) Manage security reports and alerts by using the Microsoft 365 Defender portal

• review and respond to the Microsoft 365 Secure Score
• review and respond to security alerts in Microsoft 365 Defender
• review and respond to issues identified in security and compliance reports in Microsoft 365 Defender Plan, implement, and manage email and collaboration protection by using Microsoft

Defender for Office 365

• plan and implement policies and rules in Microsoft Defender for Office 365
• review and respond to issues identified in Microsoft Defender for Office 365, including threats, investigations, and campaigns
• unblock users

Plan, implement, and manage endpoint protection by using Microsoft Defender for Endpoint

• plan Microsoft Defender for Endpoint
• onboard devices to Microsoft Defender for Endpoint
• configure Microsoft Defender for Endpoint settings
• review and respond to endpoint vulnerabilities
• review and respond to risks on devices
• review and respond to exposure score

Plan, implement, and manage Microsoft Defender for Cloud Apps

• configure the application connector for Office 365
• plan and configure Microsoft Defender for Cloud Apps policies
• review and respond to Microsoft Defender for Cloud Apps alerts
• review and respond to activity log
• configure Cloud App Discovery
• review and respond to issues identified in Cloud App Discovery

Manage Microsoft 365 compliance (30—35%) Plan and implement information governance

• plan and implement retention labels and label policies
• recover deleted data in Exchange Online and SharePoint Online
• implement records management

Plan and implement information protection

• plan and implement data classification
• plan and implement sensitivity labels and policies
• optimize label usage by using Content Explorer, Activity Explorer, and label reports

Plan and implement data loss prevention (DLP)

• plan and implement DLP for workloads
• plan and implement Microsoft 365 Endpoint DLP
• review and respond to DLP alerts, events, and reports

Manage search and investigation

• configure auditing in Azure AD, including diagnostic settings
• plan and configure audit retention policies for Microsoft 365
• retrieve and interpret audit logs for workloads
• plan and configure eDiscovery and Advanced eDiscovery
• specify a Content Search based on requirements