SLY GITTENS - MS-100 STUDY GUIDE

Skills measured
 The content of this exam was updated on September 24, 2020. Please download the exam skills
outline below to see what changed.
 Design and implement Microsoft 365 services (25-30%)
 Manage user identity and roles (35-40%)
 Manage access and authentication (20-25%)
 Plan Office 365 workloads and applications (10-15%)
Download exam skills outline

Microsoft Partner Training

● MS-100: Microsoft 365 Identity and Services Learning Path (Free, the content is slightly older)
○ This content is free and created by Microsoft and its good but some of the content is
outdated. If you are a Microsoft partner it may be worth time investment.

CloudAcademy.com Training
● Great third party training. MS-100 Exam Preparation: Microsoft 365 Identity and Services ($39
month - 7-day free trial)
● I like the format for this exam and it comprehensive but you will have to leverage the below
hyperlinks because a few topics are not covered.

App.Pluralsight.com Training
● Great third party training. Managing Microsoft 365 Identity and Services (MS-100) ($29 month - 7-
day free trial)
● This training is great and dives a little deeper than Cloud Academy. It does provide demos but you
must create your own lab environment to test the different concepts. If I had to choose one
training it would be this one.

Ingrammicrotraining.com Training
● Microsoft 365 Identity and Services - MS-100 ( $2380.00 USD this 4-day class)
● Full four-day course provides more details than all of the other options and it provides a lab
environment. If you are an Ingram Micro partner this would be the way to go if you have the
budget for it.

Measureup.com Practice Test

● Microsoft Official Practice Test MS-100: Microsoft 365 Identity and Services ($99)
● Great test but the price may be a deal-breaker for some people

Examtopic.com Practice Test

● Microsoft MS-100 Practice test (Free)
● Free questions and for the most part accurate and the community element is very helpful.
 SLY GITTENS - MS-100 STUDY GUIDE
Design and Implement Microsoft 365 Services (25-30%)

Manage domains
● Add and configure additional domains
 Add a domain to Office 365 [Microsoft – Docs – Office 365]
 Configure a custom domain name [Microsoft – Docs]
● Configure user identities for new domain name
 Domains FAQ [Microsoft – Docs – Office 365]
 Change a user’s email address [Microsoft – Docs – Office 365]
● Configure workloads for new domain name
 DNS basics [Microsoft – Docs – Office 365]
 Set up your domain (host-specific instructions) [Microsoft Docs]s
● Design domain name configuration
 Can I add custom subdomains or multiple domains to Office 365? [Microsoft – Docs –
Office 365]
● Set primary domain name
 How do I change the default domain in Office 365? [Microsoft – Docs – Office 365]
● Verify custom domain
 Add a domain to Office 365 [Microsoft – Docs – Office 365]

Plan a Microsoft 365 implementation

● Get your organization ready for Office 365 Enterprise [Microsoft – Docs – Office 365 Enterprise]
● Plan for Microsoft 365 on-premises Infrastructure
 Office 365 URLs and IP address ranges [Microsoft – Docs – Office 365 Enterprise]
 Deployment of Microsoft 365 Enterprise with existing infrastructure [Microsoft – Docs]
 Microsoft 365 Enterprise foundation infrastructure [Microsoft – Docs]
● Plan identity and authentication solution
 What are authentication methods? [Microsoft – Azure – Active Directory]
 Understanding Office 365 identity and Azure Active Directory [Microsoft – Docs – Office
365 Enterprise]
 Choose the right authentication method for your Azure Active Directory hybrid identity
solution [Microsoft – Azure – Security

Setup Microsoft 365 tenancy and

subscription
● Configure subscription and tenant roles and workload settings
 Classic subscription administrator roles, Azure RBAC roles, and Azure AD administrator
roles [Microsoft – Azure – Active Directory]
 About Office 365 admin roles [Microsoft – Docs – Office 365]
 SLY GITTENS - MS-100 STUDY GUIDE
● Evaluate Microsoft 365 for organization
 Test Office 365 with Test Lab Guides (TLGs) [Microsoft – Docs – Office 365 Enterprise]
 Base Configuration dev/test environment [Microsoft – Docs – Office 365 Enterprise]
● Plan and create tenant
 Create Your Office 365 Tenant [Microsoft – Docs]
● Upgrade existing subscriptions to Microsoft 365
 Subscriptions, licenses, accounts, and tenants for Microsoft’s cloud offerings [Microsoft – Docs
– Office 365 Enterprise]
 Switch to a different Office 365 for business plan [Microsoft – Docs – Office 365]
● Monitor license allocations
 Manage user accounts and licenses with Office 365 PowerShell [Microsoft – Docs – Office 365
Enterprise]
 Office 365 Reports in the Admin Center – Microsoft Office activations [Microsoft – Docs –
Office 365]
● manage API access to Azure subscriptions and resources

Manage Microsoft 365 subscription and

tenant health
 Use the Microsoft 365 admin center to manage your subscription [Microsoft – Docs –
Dynamics 365]

● Manage service health alerts

 Service Health and Continuity [Microsoft – Docs – Office 365]
 How to check Office 365 service health [Microsoft – Docs – Office 365 Enterprise]
 View service health notifications by using the Azure portal [Microsoft – Azure – Azure
Monitor]

● Create & manage service requests

 How to create service requests to contact Office 365 support? [Blog]

● Create internal service health response plan

 Service Health and Continuity [Microsoft – Docs – Office 365]
 Configure health notifications for existing problem management systems using a
webhook [Microsoft – Azure – Service Health]

● Monitor service health

 How to check Office 365 service health [Microsoft – Docs – Office 365 Enterprise]
 Monitor service health [Microsoft – support – office]

● Configure and review reports, including BI, OMS, and Microsoft 365 reporting
 Customize the reports in Microsoft 365 usage analytics [Microsoft – Docs – Office 365]
 Monitor usage metrics for Power BI dashboards and reports [Microsoft – Docs – Power BI]
 Activity Reports in the Office 365 admin center [Microsoft – Docs – Office 365]
 Office 365 Reporting Features [Microsoft – Docs – Office 365]
 SLY GITTENS - MS-100 STUDY GUIDE
 View reports for Office 365 Advanced Threat Protection [Microsoft – Docs – Office 365]

● Schedule and review security and compliance reports

 View the reports for data loss prevention [Microsoft – Docs – Office 365]
 View the data governance reports [Microsoft – Docs – Office 365]
 View reports for Office 365 Advanced Threat Protection [Microsoft – Docs – Office 365]
 Create a schedule for a report in the Security & Compliance Center [Microsoft – Docs – Office
365]
 Manage schedules for multiple reports in the Security & Compliance Center [Microsoft – Docs
– Office 365]
 View email security reports in the Security & Compliance Center [Microsoft – Docs – Office
365]
 Smart reports and insights in the Office 365 Security & Compliance Center [Microsoft – Docs –
Office 365]
 Reports in the Office 365 Security & Compliance Center [Microsoft – Docs – Office 365]
 Auditing and Reporting in Office 365 [Microsoft – Docs – Office 365]

● Schedule and review usage metrics

 Microsoft 365 usage analytics [Microsoft – Docs – Office 365]
 Metric descriptions for Workplace Analytics [Microsoft – Docs – Workplace Analytics]
 Navigate andx utilize the reports in Microsoft 365 usage analytics [Microsoft – Docs – Office
365]

Plan migration of users and data

● Identify data to be migrated and method
 Migrate your organization data to Office 365 Enterprise [Microsoft – Docs – Office 365
Enterprise]
 Office 365 migration performance and best practices [Microsoft – Docs – Exchange]

● Identify users and mailboxes to be migrated and method

 Ways to migrate multiple email accounts to Office 365 [Microsoft – Docs – Exchange]
 Migrate email using the Exchange cutover method [Microsoft – Docs – Exchange]

● Plan migration of on-prem users and groups

 Plan for directory synchronization for Office 365 [Microsoft – Docs – Office 365 Enterprise]

● Import PST Files

 Overview of importing your organization PST files to Office 365 [Microsoft – Docs – Office 365]

Manage User Identity and Roles (35-40%)

Design identity strategy

 Evaluate requirements and solution for synchronization
 Office 365 identity models and Azure Active Directory [Microsoft – Docs – Office 365
Enterprise]
 SLY GITTENS - MS-100 STUDY GUIDE
 Fixing problems with directory synchronization for Office 365 [Microsoft – Docs – Office 365
Enterprise]
 Plan for directory synchronization for Office 365 [Microsoft – Docs – Office 365 Enterprise]
 Determine directory synchronization requirements [Microsoft – Azure – Active Directory]
 Evaluate requirements and solution for identity management
 Understanding Office 365 identity and Azure Active Directory [Microsoft – Docs – Office 365
Enterprise]
 Evaluate requirements and solution for authentication
 Determine identity requirements for your hybrid identity solution [Microsoft – Azure – Active
Directory]

Plan identity synchronization by using

Azure AD Connect
 Design directory synchronization
 Topologies for Azure AD Connect [Microsoft – Azure – Active Directory]
 Implement directory synchronization with directory services, federation services, and Azure
endpoints
 Manage and customize Active Directory Federation Services by using Azure AD
Connect [Microsoft – Azure – Active Directory]
 Extend Active Directory Domain Services (AD DS) to Azure [Microsoft – Azure – Architecture]
 Azure AD Connect and federation [Microsoft – Azure – Active Directory]

Manage identity synchronization by using

Azure AD Connect
 Getting started with Azure AD Connect using express settings [Microsoft – Azure – Active
Directory]
 Monitor Azure AD Connect Health
 Azure Active Directory Connect Health operations [Microsoft – Azure – Active Directory]
 Monitor AD FS using Azure AD Connect Health [Microsoft – Azure – Active Directory]
 Azure AD Connect and Azure AD Connect Health installation roadmap [Microsoft – Azure –
Active Directory]
 Manage Azure AD Connect synchronization
 Azure AD Connect sync: Understand and customize synchronization [Microsoft – Azure –
Active Directory]
 Introduction to the Azure AD Connect Synchronization Service Manager UI [Microsoft – Azure
– Active Directory]
 Changing the Azure AD Connect sync service account password [Microsoft – Azure – Active
Directory]
 Azure AD Connect sync: Make a change to the default configuration [Microsoft – Azure –
Active Directory]
 Troubleshoot object synchronization with Azure AD Connect sync [Microsoft – Azure – Active
Directory]
 Configure object filters
 Azure AD Connect sync: Configure filtering [Microsoft – Azure – Active Directory]
 SLY GITTENS - MS-100 STUDY GUIDE
 Configure password sync
 Implement password hash synchronization with Azure AD Connect sync [Microsoft – Azure –
Active Directory]
 What is password hash synchronization with Azure AD? [Microsoft – Azure – Active Directory]
 How-to: Configure password writeback [Microsoft – Azure – Active Directory]
 Implement multi-forest AD Connect scenarios
 Topologies for Azure AD Connect [Microsoft – Azure – Active Directory]

Manage Azure AD identities

 Plan Azure AD identities
 What is hybrid identity? [Microsoft – Azure – Active Directory]
 Azure Active Directory deployment plans [Microsoft – Azure – Active Directory]
 What is Azure AD identity governance? [Microsoft – Azure – Active Directory]
 Implement and manage Azure AD self-service password reset
 How to successfully roll out self-service password reset [Microsoft – Azure – Active Directory]
 Quickstart: Self-service password reset [Microsoft – Azure – Active Directory]
 How it works: Azure AD self-service password reset [Microsoft – Azure – Active Directory]
 Tutorial: Azure AD password reset from the login screen [Microsoft – Azure – Active Directory]
 Licensing requirements for Azure AD self-service password reset [Microsoft – Azure – Active
Directory]
 Manage access reviews
 What are Azure AD Access Reviews? [Microsoft – Azure – Active Directory]
 Manage user access with Azure AD Access Reviews [Microsoft – Azure – Active Directory]
 Manage guest access with Azure AD Access Reviews [Microsoft – Azure – Active Directory]
 Manage groups
 Understand and manage groups [Microsoft – Support office]
 Manage passwords
 Reset a user’s password using Azure Active Directory [Microsoft – Azure – Active Directory]
 Password policies and restrictions in Azure Active Directory [Microsoft – Azure – Active
Directory]
 Manage product licenses
 Manage user accounts and licenses with Office 365 PowerShell [Microsoft – Docs – Office 365
Enterprise]
 Assign or remove licenses using the Azure Active Directory portal [Microsoft – Azure – Active
Directory]
 What is group-based licensing in Azure Active Directory? [Microsoft – Azure – Active Directory]
 Assign licenses to users by group membership in Azure Active Directory [Microsoft – Azure –
Active Directory]
 Scenarios, limitations, and known issues using groups to manage licensing in Azure Active
Directory [Microsoft – Azure – Active Directory]
 Manage users
 Add or delete users using Azure Active Directory [Microsoft – Azure – Active Directory]
 Perform bulk user management
 Add users individually or in bulk to Office 365 – Admin Help [Microsoft – Docs – Office 365]
 SLY GITTENS - MS-100 STUDY GUIDE
Manage user roles
 Plan user roles
 About Office 365 admin roles [Microsoft – Docs – Office 365]
 About admin roles [Microsoft – Docs ]
 Allocate roles in workloads
 Administrator roles for Microsoft 365 workloads [Microsoft – Azure – Active Directory]
 Assign administrator and non-administrator roles to users with Azure Active
Directory [Microsoft – Azure – Active Directory]
 Configure administrative accounts
 Protect your Office 365 global administrator accounts [Microsoft – Docs – Office 365
Enterprise]
 Assign admin roles [Microsoft – Docs]
 Configure RBAC within Azure AD
 Manage access to Azure resources using RBAC and the Azure portal [Microsoft – Azure – Role-
based access control]
 Classic subscription administrator roles, Azure RBAC roles, and Azure AD administrator
roles [Microsoft – Docs]
 Delegate admin rights
 Delegate administration in Azure Active Directory [Microsoft – Azure – Active Directory]
 Manage admin roles
 View and assign administrator roles in Azure Active Directory [Microsoft – Azure – Active
Directory]
 Manage role allocations by using Azure AD
 Assign administrator and non-administrator roles to users with Azure Active
Directory [Microsoft – Azure – Active Directory]
 Plan security and compliance roles for Microsoft 365
 Administrator roles by admin task in Azure Active Directory [Microsoft – Azure – Active
Directory]
 Give users access to the Office 365 Security & Compliance Center [Microsoft – Docs – Office
365]
 Get ready for the new Microsoft 365 security center and Microsoft 365 compliance
center [Microsoft – Docs – Office 365]
 Assign eDiscovery permissions in the Office 365 Security & Compliance Center [Microsoft –
Docs – Office 365]

Manage Access and Authentication (20-25%)

Manage authentication
 Design authentication method
 What are authentication methods? [Microsoft – Azure – Active Directory]
 Configure authentication
 How it works: Azure Multi-Factor Authentication [Microsoft – Azure – Active Directory]
 How it works: Azure AD self-service password reset [Microsoft – Azure – Active Directory]
 How it works: Azure Multi-Factor Authentication [Microsoft – Azure – Active Directory]
 Implement authentication method
 Azure AD Authentication Documentation [Microsoft – Azure – Active Directory]
 Manage authentication
 SLY GITTENS - MS-100 STUDY GUIDE
 Azure AD Authentication Documentation
[Microsoft – Azure – Active Directory
 Monitor authentication
 Sign-in activity reports in the Azure Active Directory portal [Microsoft – Azure – Active
Directory]
 What are Azure Active Directory reports? [Microsoft – Azure – Active Directory]
 What is Azure Active Directory monitoring? (preview) [Microsoft – Azure – Active Directory]

Implement Multi-Factor Authentication

(MFA)
 Design an MFA solution
 Determine multi-factor authentication requirements for your hybrid identity
solution [Microsoft – Azure – Active Directory]
 How it works: Azure Multi-Factor Authentication [Microsoft – Azure – Active Directory]
 Configure MFA for apps or users
 Planning a cloud-based Azure Multi-Factor Authentication deployment
 How modern authentication works for Office 2013 and Office 2016 client apps [Microsoft –
Docs – Office 365 Enterprise]
 Office 365 Client App Support – Modern Authentication [Microsoft – Docs – Office 365
Enterprise]
 Multi-Factor Authentication (MFA) Setup and End-User Experience with Office 365 and
PowerShell [Microsoft – Blogs Technet
 Administer MFA users
 Manage user settings with Azure Multi-Factor Authentication in the cloud [Microsoft – Azure –
Active Directory]
 Report MFA utilization
 Sign-in activity reports in the Azure Active Directory portal [Microsoft – Azure – Active
Directory]

Configure application access

 Configure application registration in Azure AD
 Quickstart: Register an app with the Azure Active Directory v1.0 endpoint [Microsoft – Azure –
Active Directory]
 Quickstart: Register an app with the Azure Active Directory v2.0 endpoint [Microsoft – Azure –
Active Directory]
 Develop line-of-business apps for Azure Active Directory [Microsoft – Azure – Active Directory]
 Quickstart: Register an application with the Microsoft identity platform (Preview) [Microsoft –
Azure – Active Directory]
 Configure Azure AD application proxy
 Remote access to on-premises applications through Azure Active Directory’s Application
Proxy [Microsoft – Azure – Active Directory]
 Understand Azure AD Application Proxy connectors [Microsoft – Azure – Active Directory]
 Tutorial: Add an on-premises application for remote access through Application Proxy in Azure
Active Directory [Microsoft – Azure – Active Directory]
 Publish enterprise apps in Azure AD
 Quickstart: Add an application to your Azure Active Directory tenant [Microsoft – Azure –
 SLY GITTENS - MS-100 STUDY GUIDE
Active Directory]

Implement access for external users of

Microsoft 365 workloads
 Create B2B accounts
 Add Azure Active Directory B2B collaboration users in the Azure portal [Microsoft – Azure –
Active Directory]
 Setup Azure Active Directory B2B collaboration for simplified resource sharing with external
users[Microsoft – Azure – Blog]
 Azure Active Directory B2B collaboration licensing guidance [Microsoft – Azure – Active
Directory]
 Tutorial: Enforce multi-factor authentication for B2B guest users [Microsoft – Azure – Active
Directory]
 How users in your organization can invite guest users to an app [Microsoft – Azure – Active
Directory]
 Use SharePoint Online as a business-to-business (B2B) extranet solution [Microsoft – Docs –
SharePoint]
 What is guest user access in Azure Active Directory B2B? [Microsoft – Azure – Active Directory]
 Azure Active Directory B2B collaboration FAQs [Microsoft – Azure – Active Directory]
 Office 365 external sharing and Azure Active Directory B2B collaboration [Microsoft – Azure –
Active Directory]
 Compare B2B collaboration and B2C in Azure Active Directory [Microsoft – Azure – Active
Directory]
 Azure Active Directory B2B collaboration invitation redemption [Microsoft – Azure – Active
Directory]
 Azure Active Directory B2B collaboration for hybrid organizations [Microsoft – Azure – Active
Directory]
 The elements of the B2B collaboration invitation email – Azure Active Directory [Microsoft –
Azure – Active Directory]
 Properties of an Azure Active Directory B2B collaboration user [Microsoft – Azure – Active
Directory]
 Create guest accounts
 Quickstart: Add guest users to your directory in the Azure portal [Microsoft – Azure – Active
Directory]
 Quickstart: Add a guest user with PowerShell [Microsoft – Azure – Active Directory]
 Add external users to your organization [Microsoft – Azure – DevOps]
 Invite guest users and assign Azure resource access in PIM [Microsoft – Azure – Active
Directory]
 Design solutions for external access
 Properties of an Azure Active Directory B2B collaboration user [Microsoft – Azure – Active
Directory]
 Teams Guest Access checklist [Microsoft – Docs – Microsoft teams]
 Create a design [Microsoft – Docs – Enterprise Mobility + Security]
 Set external sharing on site collections in Office 365 [Microsoft – Docs – SharePoint]
 Federated Identity pattern [Microsoft – Azure – Architecture]
 SharePoint development and design tools and practices [Microsoft – Docs – SharePoint]
 SharePoint site design and site script overview [Microsoft – Docs – SharePoint]
 SLY GITTENS - MS-100 STUDY GUIDE
Plan Office 365 Workloads and Applications (10-15%)

Plan for Office 365 workload deployment

 Deployment advisors for Office 365 services [Microsoft – Docs – Office 365 Enterprise]
 Identify hybrid requirements
 Exchange Server hybrid deployments [Microsoft – Docs – Exchange]
 Hybrid for SharePoint Server [Microsoft – Docs – SharePoint]
 Plan connectivity and data flow for each workload
 Hybrid deployment prerequisites [Microsoft – Docs – Exchange]
 Plan hybrid connectivity between Skype for Business Server and Office 365 [Microsoft – Docs –
Skype for Business]
 Plan SharePoint Server hybrid [Microsoft – Docs – SharePoint]
 Plan for Microsoft 365 workload connectivity
 Network connectivity to Office 365 [Microsoft – Docs – Office 365 Enterprise]
 Network planning and performance tuning for Office 365 [Microsoft – Docs – Office 365
Enterprise]
 Plan migration strategy for workloads
 Get cloud migration best practices [Microsoft – Docs – Azure]
 Start your cloud migration process [Microsoft – Docs – Azure]

Plan Office 365 applications deployment

 Manage Office 365 software downloads
 Deploy Microsoft 365 Apps from the cloud [Microsoft – Docs – Deploy Office]
 Deploy Microsoft 365 Apps from a local source [Microsoft – Docs – Deploy Office]
 Manage software download settings in Office 365 [Microsoft – Docs – Deploy Office]
 Download and install or reinstall Office 365 or Office 2019 on a PC or Mac [Microsoft –
Support office]
 Plan for Microsoft 365 Apps
 Deploy and manage mobile apps [Microsoft – Support office]
 Plan for Microsoft 365 Apps updates
 Overview of update channels for Microsoft 365 Apps [Microsoft – Docs – Deploy Office]
 Plan your enterprise deployment of Microsoft 365 Apps [Microsoft – Docs – Deploy Office]
 Release information for updates to Microsoft 365 Apps [Microsoft – Docs – Office updates]
 Plan for Microsoft 365 Apps connectivity
 Release information for updates to Microsoft 365 Apps [Microsoft – Docs – Office updates]
 Plan for Office online
 Office Online Service Description [Microsoft – Docs – Office 365]
 Plan Microsoft 365 Apps deployment
 Deployment guide for Microsoft 365 Apps [Microsoft – Docs – Deploy Office]