Microsoft - Microsoft 365 Identity and Services

Curriculum

Module 1: Deploy and manage a Microsoft 365 tenant (15–20%)

Plan and implement a Microsoft 365 tenant

• Plan a tenant
• Create a tenant
• Implement and manage domains
• Configure organizational settings, including security, privacy, and profile Monitor Microsoft 365 tenant health
• Create and manage service requests
• Create an incident response plan
• Monitor service health
• Monitor application access
• Configure and review reports, including Azure Monitor logs and Log Analytics workspaces
• Schedule and review usage metrics, including Workplace Analytics and productivity score

Module 2: Plan and manage user identity and roles (30–35%)

Plan identity synchronization

• Design synchronization solutions for multitenant and multiforest scenarios
• Evaluate whether objects should be synchronized, not synchronized, or created as cloud-only
• Identify which Azure AD Connect features to enable, such as writeback and device synchronization
• Identify synchronization pre-requisites, including connectivity method, permissions, and server requirements
• Choose between Azure AD Connect and Azure AD Connect cloud sync
• Plan user sign-in for Azure AD hybrid identities, including pass-through authentication, seamless, and SSO

Implement and manage identity synchronization with Azure AD

• Prepare for identity synchronization by using IdFix
• Configure and manage directory synchronization by using Azure AD Connect cloud sync
• Configure and manage directory synchronization by using Azure AD Connect
• Configure Azure AD Connect object filters
• Monitor synchronization by using Azure AD Connect Health
• Troubleshoot Azure AD Connect synchronization

Plan and manage Azure AD identities

• Plan Azure AD identities
• Create and manage users
• Create and manage guest users
• Create and manage groups, including Microsoft 365 groups
• Manage and monitor Microsoft 365 license allocations
• Perform bulk user management, including PowerShell

Plan and manage roles in Microsoft 365

• Plan for role assignments
• Manage roles in Microsoft 365 admin center
• Manage administrative units
• Plan and implement privileged identity management for Azure AD roles

Module 3: Manage access and authentication (20–25%)

Plan and implement authentication

• Choose an authentication method, including Windows Hello for Business, passwordless, and tokens
• Implement and manage authentication methods
• Implement and manage self-service password reset (SSPR)
• Implement and manage Azure AD password protection
• Configure and manage multi-factor authentication (MFA)
• Investigate and resolve authentication issues

Plan and implement secure access

• Plan and implement access reviews in Azure AD identity governance
• Plan and implement entitlement packages in Azure AD identity governance
• Plan for identity protection
• Implement and manage Azure AD Identity Protection
• Plan conditional access policies
• Implement and manage conditional access policies

Plan and implement application access

• Plan access and authentication to application registrations and Azure AD enterprise applications
• Configure application registration in Azure AD
• Manage user permissions for application registrations
• Manage OAuth application requests in Azure AD, Microsoft Defender for Cloud Apps, and Microsoft 365 Defender
• Configure Azure AD Application Proxy
• Publish enterprise applications in Azure AD

Module 4: Plan Microsoft 365 workloads and applications (20–25%)

Plan and implement Microsoft 365 Apps deployment

• Plan for client connectivity to Microsoft 365 workloads
• Plan Microsoft 365 App compatibility by using the Readiness Toolkit
• Plan for Microsoft 365 Apps updates
• Specify initial configuration for Microsoft 365 Apps by using the Microsoft 365 Apps admin center
• Implement Microsoft 365 Apps deployment and software downloads

Plan and implement Exchange Online deployments

• Plan for DNS records required by Exchange Online
• Plan and implement an Exchange hybrid organization
• Plan and implement mail routing, including connectors, mail flow rules, and remote domains
• Plan and implement organizational settings

Plan and implement Microsoft SharePoint Online, OneDrive, and Microsoft Teams

• Specify SharePoint site types, site collections, and lists
• Plan a migration strategy for SharePoint Online and OneDrive
• Identify hybrid requirements for SharePoint Online
• Manage access configurations for SharePoint Online and Microsoft Teams
• Manage SharePoint Online tenant and site settings
• Map Phone System features to requirements
• Plan and implement organizational settings
• Plan, implement, and manage guest and external access