Topics
Skill: Deploy and Manage a Microsoft 365 Tenant
Part 1: Implement and Manage a Microsoft 365 Tenant
Session 1: Tenant Setup and Management
- Create a Microsoft 365 tenant
- Implement and manage domains
- Configure organizational settings, including Security & Privacy and Organizational Profile
Session 2: Service Health and Connectivity
- Identify and respond to service health issues
- Configure notifications in service health
- Configure and review Network Connectivity Insights
Session 3: Adoption, Usage, and Backup
- Monitor adoption and usage
- Configure and manage Microsoft 365 Backup
Part 2: Manage Users and Groups
Session 4: User Management
- Create and manage users in Microsoft Entra, including external users and guests
- Create and manage contacts in the Microsoft 365 admin center
Session 5: Group Management
- Create and manage groups, including Microsoft 365 groups and shared mailboxes
- Manage and monitor Microsoft 365 licenses, including group-based licensing
Session 6: Bulk and Automated Management
- Perform bulk user management, including PowerShell
Part 3: Manage Roles and Role Groups
Session 7: Role and Group Management
- Implement and manage built-in roles in Microsoft 365 and Microsoft Entra
- Implement and manage custom roles in the Microsoft Entra admin center
Session 8: Role Delegation and Privilege Management
- Manage role groups in Microsoft Defender XDR, Microsoft Purview, and Microsoft 365 workloads
- Manage delegation using administrative units
- Manage roles in Microsoft Entra Privileged Identity Management
Skill: Implement and Manage Microsoft Entra Identity and Access
Part 1: Identity Synchronization
Session 9: Preparing for Synchronization
- Prepare for identity synchronization using IdFix
Session 10: Directory Synchronization
- Implement and manage directory synchronization using Microsoft Entra Connect Sync or Microsoft Entra Cloud Sync
- Monitor synchronization using Microsoft Entra Connect Health
- Troubleshoot synchronization issues
Part 2: Authentication Management
Session 11: Authentication Methods
- Implement and manage authentication methods
- Implement and manage self-service password reset (SSPR)
- Implement and manage Microsoft Entra Password Protection
- Investigate and resolve authentication issues
Part 3: Secure Access Management
Session 12: Identity Protection
- Plan for identity protection
- Implement and manage Microsoft Entra ID Protection
Session 13: Conditional Access and MFA
- Plan, implement, and manage Conditional Access policies
- Implement and manage multi-factor authentication (MFA) using Conditional Access policies
Skill: Manage Security and Threats by Using Microsoft Defender XDR
Part 1: Security Reports and Alerts
Session 14: Reviewing Security Insights
- Review and respond to security reports and alerts generated by Microsoft Defender XDR
- Review and take actions to improve the Microsoft Secure Score
Session 15: Threat and Compliance Reports
- Review and respond to issues in security and compliance reports
- Review and respond to threats identified in threat analytics
Part 2: Email and Collaboration Protection
Session 16: Policies and Threat Management
- Implement policies and rules in Defender for Office 365
- Review and respond to threats in Defender for Office 365
Session 17: Attack Simulations
- Create and run campaigns, such as attack simulation
Unblock users
Part 3: Endpoint Protection
Session 18: Device Onboarding and Configuration
- Onboard devices to Defender for Endpoint
- Configure endpoint settings
Session 19: Risk and Vulnerability Management
- Review and respond to endpoint vulnerabilities
- Manage risks in the Microsoft Defender Vulnerability Management dashboard
Part 4: Cloud App Protection
Session 20: Microsoft Defender for Cloud Apps
- Configure the app connector for Microsoft 365
- Configure Microsoft Defender for Cloud Apps policies
- Review and respond to alerts in Defender for Cloud Apps
- Interpret activity logs and configure Cloud App Discovery
Skill: Manage Compliance by Using Microsoft Purview
Part 1: Information Protection and Lifecycle Management
Session 21: Sensitive Information Management
- Implement and manage sensitive information types using keywords, keyword lists, or regular expressions
Session 22: Retention Policies and Labels
- Implement retention labels, retention label policies, and retention policies
- Monitor label usage using Content Explorer, Activity Explorer, and label reports
Part 2: Data Loss Prevention (DLP)
Session 23: DLP Configuration and Management
- Configure DLP policies for Exchange, SharePoint, OneDrive, and Teams
- Configure Endpoint DLP
- Review and respond to DLP alerts, events, and reports
