Exam MS-101: Microsoft 365 Mobility and Security Learning Path Provided by Tech and Accounting
Exam MS-101: Microsoft 365 Mobility and Security – Skills Measured
NOTE: The bullets that appear below each of the skills measured are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive. In most cases, exams do NOT cover preview features, and some features will only be added to an exam when they are GA (General Availability).
Implement modern device services (40-45%)
Plan device management
- plan device monitoring
- plan Microsoft Endpoint Manager
implementation - plan for configuration profiles
Study Path Reading Links
- Device management overview
- Device management roadmap for Microsoft 365
- Mobile device management for Contoso
- Information protection for the Contoso Corporation
- Tutorial: Walkthrough Intune in Microsoft Endpoint Manager
- Azure Active Directory integration with MDM (Long read)
- Set the mobile device management authority
- What is device enrollment in Intune?
- Enrolled device management capabilities of Microsoft Intune
- Set enrollment restrictions
- Configure Hybrid Azure Active Directory Join (Video)
- How Intune (standalone) MDM Works (Video-Requires LinkedIn sign on)
Study Path Videos
Video 1
Video 2
Video 3
Video 4
Video 5
Manage device compliance
- plan for device Compliance
- plan for attack surface reduction
- configure security baselines
- configure device compliance policy
Study Path Reading Links
- Use compliance policies to set rules for devices you manage with Intune
- Monitor Intune Device compliance policies
- Create a compliance policy in Microsoft Intune
- What are common ways to use Conditional Access with Intune?
- Building a Conditional Access policy
- Conditional Access: Require MFA for all users
- Create a device-based Conditional Access policy
Study Path Videos
Video 1
Video 2 - Covers a broad range of useful information across multiple learning areas.
Video 3
Video 4
Plan for apps
- create and configure Microsoft Store for Business
- plan app deployment
- plan for mobile application management
(MAM)
Study Path Reading Links
- How to manage volume purchased apps from the Microsoft Store for Business with Microsoft Intune
- Distribute apps using your private store
- Configure access to Microsoft Store
- Manage access to private store
- Add Microsoft Store apps to Microsoft Intune
- Add apps to Microsoft Intune
- What is co-management?
- Tutorial: Enable co-management for existing Configuration Manager clients
- Device monitoring and reporting in the Microsoft 365 security center
- Create a device profile in Microsoft Intune
- Assign user and device profiles in Microsoft Intune
- Monitor device profiles in Microsoft Intune
- Common questions and answers with device policies and profiles in Microsoft Intune
- What is Microsoft Intune app management?
- Frequently asked questions about MAM and app protection
- Remove devices by using wipe, retire, or manually unenrolling the device
- Interactive guide-Manage devices with Microsoft Endpoint Manager
- Interactive guide-Manage and protect mobile and desktop applications with Microsoft Endpoint Manager
Study Path Videos
Video 1 (Optional)
Video 2
Video 3
Video 4
Video 5
Video 6
Video 7
Video 8
Plan Windows 10 deployment
- plan for Windows as a Service (WaaS)
- plan the appropriate Windows 10 Enterprise deployment method
- analyze upgrade readiness for Windows 10 by using services such as Desktop Analytics
- evaluate and deploy additional Windows 10 Enterprise security features
