Microsoft - Microsoft 365 Mobility and Security



Only 4 Days



Classroom / Online / Hybrid

Next date

Next date:

27/3/2023 (Monday)


This accelerated Microsoft 365 Mobility and Security course, covers three central elements of Microsoft 365 enterprise administration – Microsoft 365 security management, Microsoft 365 compliance management, and Microsoft 365 device management.

In Microsoft 365 security management, you will examine all the common types of threat vectors and data breaches facing organizations today, and you will learn how Microsoft 365’s security solutions address these security threats. You will be introduced to the Microsoft Secure Score, as well as to Azure Active Directory Identity Protection. You will then learn how to manage the Microsoft 365 security services, including Exchange Online Protection, Advanced Threat Protection, Safe Attachments, and Safe Links. Finally, you will be introduced to the various reports that monitor your security health.

You will then transition from security services to threat intelligence; specifically, using the Security Dashboard and Advanced Threat Analytics to stay ahead of potential security breaches. With your Microsoft 365 security components now firmly in place, you will examine the key components of Microsoft 365 compliance management.

In just 4 days, you’ll learn an overview of all key aspects of data governance, including data archiving and retention, Information Rights Management, Secure Multipurpose Internet Mail Extension (S/MIME), Office 365 message encryption, and data loss prevention (DLP). You’ll also learn how to:

  • Delve deeper into archiving and retention, paying particular attention to in-place records management in SharePoint, archiving and retention in Exchange, and Retention policies in the Security and Compliance Center.
  • Understand the key aspects of data governance, and examine how to implement them, including the building of ethical walls in Exchange Online, creating DLP policies from built-in templates, creating custom DLP policies, creating DLP policies to protect documents, and creating policy tips.
  • Focus on managing data governance in Microsoft 365, including managing retention in email, troubleshooting retention policies and policy tips that fail, as well as troubleshooting sensitive data.
  • Implement Azure Information Protection and Windows Information Protection.
  • Manage search and investigation, including searching for content in the Security and Compliance Center, auditing log investigations, and managing advanced eDiscovery.
  • Plan for various aspects of device management, including preparing your Windows 10 devices for co-management.
  • Transition from Configuration Manager to Intune, and you will be introduced to the Microsoft Store for Business and Mobile Application Management.
  • Implement Windows Autopilot, Windows Analytics, and Mobile Device Management (MDM).

At the end of this course, you’ll sit the Microsoft exam, and achieve your Microsoft 365 Mobility and Security certification.

Through Firebrand’s Lecture | Lab | Review methodology, you’ll get certified at twice the speed of the traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.


This course is ideal for:

  • People who are aspiring to the Microsoft 365 Enterprise Admin role and have completed one of the Microsoft 365 role-based administrator certification paths.


Other accelerated training providers rely heavily on lecture and independent self-testing and study.

Effective technical instruction must be highly varied and interactive to keep attention levels high, promote camaraderie and teamwork between the students and instructor, and solidify knowledge through hands-on learning.

Firebrand Training provides instruction to meet every learning need:

  • Intensive group instruction
  • One-on-one instruction attention
  • Hands-on labs
  • Lab partner and group exercises
  • Question and answer drills
  • Independent study


Module 1: Plan and implement device services (35–40%)

Plan and implement device management by using Microsoft Endpoint Manager

  • Plan co-management between Endpoint Configuration Manager and Intune
  • Plan and implement configuration profiles for Windows and MacOS clients
  • Plan and implement configuration profiles for iOS and Android
  • Review and respond to issues identified in Microsoft Endpoint Manager

Plan and implement device security and compliance by using Microsoft Endpoint Manager

  • Plan and implement device compliance policies
  • Plan and implement attack surface reduction policies
  • Implement and manage security baselines
  • Plan and configure conditional access policies for device compliance

Deploy and manage applications by using Microsoft Endpoint Manager

  • Plan and implement application deployment
  • Publish public and private applications by using Microsoft Endpoint Manager
  • Plan and implement application protection policies
  • Plan and implement application configuration policies
  • Monitor and troubleshoot application deployment

Plan for Windows client deployment and management

  • Choose Windows client deployment methods and tools based on requirements, including Windows Autopilot, USMT, Microsoft Deployment Toolkit, and Windows Deployment Services
  • Plan and implement Windows subscription-based activation
  • Plan for Windows updates
  • Plan and implement additional Windows client security features

Plan and implement device enrolment

  • Plan and implement device join or hybrid join to Azure AD
  • Plan and implement device registration to Azure AD
  • Plan and implement manual and automated device enrolment into Intune

Module 2: Manage security and threats by using Microsoft 365 Defender (25– 30%)

Manage security reports and alerts by using the Microsoft 365 Defender portal

  • Review and respond to the Microsoft 365 Secure Score
  • Review and respond to security alerts in Microsoft 365 Defender
  • Review and respond to issues identified in security and compliance reports in Microsoft 365 Defender Plan, implement, and manage email and collaboration protection by using Microsoft Defender for Office 365
  • Plan and implement policies and rules in Microsoft Defender for Office 365
  • Review and respond to issues identified in Microsoft Defender for Office 365, including threats, investigations, and campaigns
  • Unblock users Plan, implement, and manage endpoint protection by using Microsoft Defender for Endpoint
  • Plan Microsoft Defender for Endpoint
  • Onboard devices to Microsoft Defender for Endpoint
  • Configure Microsoft Defender for Endpoint settings
  • Review and respond to endpoint vulnerabilities
  • Review and respond to risks on devices
  • Review and respond to exposure score
  • Plan, implement, and manage Microsoft Defender for Cloud Apps

    • Configure the application connector for Office 365
    • Plan and configure Microsoft Defender for Cloud Apps policies
    • Review and respond to Microsoft Defender for Cloud Apps alerts
    • Review and respond to activity log
    • Configure Cloud App Discovery
    • Review and respond to issues identified in Cloud App Discovery

    Module 3: Manage Microsoft 365 compliance (30–35%)

    Plan and implement information governance

    • Plan and implement retention labels and label policies
    • Recover deleted data in Exchange Online and SharePoint Online
    • Implement records management Plan and implement information protection
    • Plan and implement data classification
    • Plan and implement sensitivity labels and policies
    • Optimize label usage by using Content explorer, Activity explorer, and label reports Plan and implement data loss prevention (DLP)
    • Plan and implement DLP for workloads
    • Plan and implement Microsoft 365 Endpoint DLP
    • Review and respond to DLP alerts, events, and reports Manage search and investigation
    • Configure auditing in Azure AD, including diagnostic settings
    • Plan and configure audit retention policies for Microsoft 365
    • Retrieve and interpret audit logs for workloads
    • Plan and configure eDiscovery and Advanced eDiscovery
    • Specify a Content Search based on requirements

    Exam Track

    At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

    MS-101: Microsoft 365 Mobility and Security exam

    This exam measures your ability to accomplish the following technical tasks: plan and implement device services; manage security and threats by using Microsoft 365 Defender; and manage Microsoft 365 compliance.

    Passing score: 700


    • Plan and implement device services (35-40%)
    • Manage security and threats by using Microsoft 365 Defender (25-30%)
    • Manage Microsoft 365 compliance (30-35%)

    What's Included

    Your accelerated course includes:

    • Accommodation *
    • Meals, unlimited snacks, beverages, tea and coffee *
    • On-site exams **
    • Exam vouchers **
    • Practice tests **
    • Certification Guarantee ***
    • Courseware
    • Up-to 12 hours of instructor-led training each day
    • 24-hour lab access
    • Digital courseware **
    • * For residential training only. Accommodation is included from the night before the course starts. This doesn't apply for online courses.
    • ** Some exceptions apply. Please refer to the Exam Track or speak with our experts
    • *** Pass first time or train again free as many times as it takes, unlimited for 1 year. Just pay for accommodation, exams, and incidental costs.


    Before attending this accelerated course, you should have:

    • Completed a role-based administrator course such as Messaging, Teamwork, Security and Compliance, or Collaboration.
    • A proficient understanding of DNS and basic functional experience with Microsoft 365 services.
    • A proficient understanding of general IT practices.

    Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.


    Here's the Firebrand Training review section. Since 2001 we've trained exactly 134561 students and asked them all to review our Accelerated Learning. Currently, 96.54% have said Firebrand exceeded their expectations.

    Read reviews from recent accelerated courses below or visit Firebrand Stories for written and video interviews from our alumni.

    "The knowledge and professionalism of the instructor, supporting and replaying all our question is really amazing. The Ruwenberg hotel is really nice and the service on the hotel fantastic. Overall, I''ve had a fantastic experience."
    David Alonso. (9/4/2018 (Monday) to 11/4/2018 (Wednesday))

    "Good environment for a training, professional people."
    Anonymous (9/4/2018 (Monday) to 11/4/2018 (Wednesday))

    "A 9 day sprint through all things Azure with a focus on getting through the MSCE exams for architecting and developing cloud solutions. The long days paid off. Comfortable accommodation with knowledgeable and attentive staff."
    Graham Morgan, Spatial Consultants Ltd. (10/7/2017 (Monday) to 18/7/2017 (Tuesday))

    "We had Phil Anderson, a very nice and intelligent man. He had to put through a lot of information. I did not take the exam at the end of the week, because I am a person who needs more time to process information. The course was structured and well done by Phil. I would recommend him as a trainer. Teacher gets a 9. The facilities of the training were good. Everything was prepared before the training, so it had an easy start. "
    Danny van Oijen, Havenziekenhuis. (13/3/2017 (Monday) to 18/3/2017 (Saturday))

    "Intense study with a great instructor and awesome co-students."
    Martin Petersen, Silvaco A/S. (25/1/2016 (Monday) to 30/1/2016 (Saturday))

    Course Dates





    Book now

    21/11/2022 (Monday)

    24/11/2022 (Thursday)

    Finished - Leave feedback



    27/3/2023 (Monday)

    30/3/2023 (Thursday)

    Wait list



    8/5/2023 (Monday)

    11/5/2023 (Thursday)

    Limited availability



    19/6/2023 (Monday)

    22/6/2023 (Thursday)




    31/7/2023 (Monday)

    3/8/2023 (Thursday)




    11/9/2023 (Monday)

    14/9/2023 (Thursday)




    Latest Reviews from our students