Microsoft 365 Bundle (MS-100, MS-101 & SharePoint 365)

Explore Microsoft 365 mobility and security, threat vectors, and secure score. Protect authentication with Azure Identity Protection and Exchange Online Protection, implement data loss prevention, and enable mobile device management.

The threat landscape has shifted beyond the firewall as data moves across employees, partners, customers, and unmanaged devices, with shadow IT demanding extended protections for intellectual property and personal data.

Detect spoofing when an email appears to come from a trusted source but originates elsewhere. Explain that attackers exploit dual mail from and from headers so replies go outside organization.

phishing uses deceptive emails from trusted sources to steal usernames and passwords, while spear phishing targets executives to deliver malware such as a rootkit or Trojan Horse.

Learn how spam and malware harm productivity and how to protect your organization from harmful payloads, data loss, encryption, and remote access threats.

Explore how an account breach in Office 365 exposes data across Exchange online, OneDrive, and SharePoint, and how attackers seek privilege escalation and multiple access paths, including insiders.

Explore how a compromised account can trigger data exfiltration, deletion, and spillage across SharePoint, OneDrive, and Teams in the cloud, including ransomware risks and access denial.

Explore how Microsoft 365's secure score measures your organization's security posture, compares it to peers, and guides you with steps to improve security via a practical dashboard.

Access your organization's secure score from the Microsoft 365 admin center, explore the secure score dashboard and overview, compare totals to global average, and review improvement actions to boost security.

Boost your security posture by following Microsoft’s ranked improvement actions in secure score, focusing on multi factor authentication for Azure Active Directory roles within the first month and 90 days.

Learn how Azure AD privileged identity management enables just-in-time elevation, auditable admin access, and ongoing reviews with multi-factor verification and alerting for secure governance.

Demonstrates how privileged access management layers just-in-time, just enough access for tasks via approval-driven elevation, using exchange scope policies in the Office 365 admin center.

Discover how Azure Identity Protection monitors cloud-based sign-ins, evaluates risk levels, and enforces conditional access with multi-factor authentication to protect Microsoft 365 environments.

Activate Azure identity protection in the Azure portal for your tenant, not in the admin center; create the identity protection environment and add it to your hub for reports.

Configure Azure identity protection policies to intercept medium or high risk sign-ins by applying user risk and sign-in risk policies to specific users. Enforce multi-factor authentication for affected users.

Configure alerts and investigate risk events in Azure Identity Protection to monitor sign-in risk, customize email recipients, enable weekly digests, and review flagged users for stronger security in Microsoft 365.

Exclude users from Azure identity protection when MFA is impractical to avoid false positives. During rollout, start with a high sign-in risk, observe activity, then lower to medium.

Protect your organization with Exchange Online Protection’s multi-layer filtering, reputation checks, machine-learning signals, and advanced threat protection with safe attachments and safe links.

Discover how zero hour auto purge, or zap, moves unopened emails to junk and strips attachments to extend protection beyond delivery using Exchange Online Protection and Advanced Threat Protection.

Exchange Online uses SPF records to authenticate emails and domain-based message and reporting compliance to prevent spoofing and phishing. Spoof intelligence, with default policies, identifies and blocks unauthorized spoofing.

Configure exchange online anti spam by editing the default policy or creating new ones, apply to recipients, block or whitelist senders, and use language, country, and IP-based quarantine controls.

Configure Exchange Online protection's anti malware policies, customize malware filter to quarantine detected attachments, set admin release and notifications, adjust attachment type filters, and apply policies by domain or group.

Enable advanced threat protection safe attachments for SharePoint, OneDrive, and Teams in the security and compliance center. Configure a safe attachment policy using processing modes (off, monitors, block, replace, dynamic delivery) and apply it by recipient or domain, noting dynamic delivery differs for cloud vs on-premises users.

Create a transport rule in the exchange admin center to bypass safe link processing for internal emails by setting a message header, enabling internal senders to click links.

Explore how to manage safe links in the security and compliance center, including the default policy, per-user policies, and whitelist or blacklist controls for ATP protection.

Create an exchange transport rule in the Exchange Admin Center to bypass safe attachments for internal messages by setting the X-MS-Exchange-OR-Skip-SafeAttachmentProcessing header and bypassing ATP processing.

Explore how to monitor Exchange Online protection using the Security and Compliance Center, viewing reports on spoof detections, spam, top senders and recipients, and scheduling weekly or monthly report digests.

Explore how the Microsoft intelligent security graph collects billions of data points from global services and uses machine learning to automate threat responses and reveal attack origins.

Explore the Microsoft 365 security dashboard to monitor global threat trends, view malware detections, and drill into threat intelligence to educate users and protect your tenant.

Explore threat explorer in the security and compliance center to view malware, filter by family, drill into delivery attempts, and map origins to protect your Microsoft 365 tenant.

Microsoft advanced threat analytics protects on-premises authentication using machine learning to detect threats along the cyber attack kill chain, including reconnaissance and lateral movement, via an on-premises center and gateways.

Install advanced threat analytics on premises by meeting prerequisites, installing the ATA Center, downloading the gateway package, and deploying a lightweight or full gateway to monitor domain activity.

Manage ATA on a local network by configuring 88 administrator and viewer roles, handling local versus domain groups, backing up and moving configuration, then restoring with a Mongo import command.

Explore cloud app security in Microsoft 365, using cloud discovery to identify app usage, manage sanctioned and unsanctioned apps, and enforce conditional access to protect data.

Configure cloud app security to enable cloud discovery, upload on-prem log files manually or automatically, connect office 365 via connectors, and manage discovered apps with firewall policies.

Enable policies from templates to monitor cloud apps, generate alerts, and enforce controls. Use malware detection and DLP to govern SharePoint sharing and quarantine or remove external collaborators.

Review discovered apps by trust scores and security and compliance details to flag unsanctioned tools, then generate executive reports and block scripts to restrict them.

Review and manage cloud app security alerts by opening for investigation, ignoring, modifying, resolving, or dismissing them; if a resolved alert recurs, reopen it, as deleted alerts cannot be recovered.

Activate in-place archiving for eligible Microsoft 365 plans to move mail to an archive mailbox, reducing primary mailbox quota and enabling online access only.

Enable in-place archive for users in the security and compliance center or the exchange admin center. Bulk enable for multiple users, and note changes take effect after directory replication.

Learn how to use in-place records management in SharePoint to declare documents as records, preserve historical state, and optionally move to a centralized records center or keep them in place.

Activate in-place records management at the site collection, then configure library and list declaration settings to declare records and lock edits and deletions via compliance details.

Exchange Online's message record management uses default retention policy tags and personal retention policy tags to automate mailbox cleanup, moving items to archive or deleting them after set times.

Create and apply retention policies and tags in the Exchange Admin Center via compliance management, defining default, policy, and personal tags to move items to archive or delete.

Troubleshoot mrm policies not running by understanding the seven-day managed folder assistant cycle, verify policy tags, and use PowerShell to force a test run.

Learn how information rights management in exchange controls a message after it's sent, blocking forward, print, and modification, with automatic and manual policy application across Outlook, Web, and mobile.

Turn on information rights management for the tenant, then apply it at the library level to encrypt and restrict downloads, with a seven-day expiration.

Explore Microsoft 365 message encryption that lets you send encrypted emails to internal and external recipients with a built-in certificate and rights management, preserving reading access only for the recipient.

Learn to use role-based access control in the security and compliance center, assign and edit permissions, and create or modify roles such as compliance administrator and e discovery.

Explore how to meet GDPR and privacy requirements with Microsoft 365 compliance tools, including the compliance center, compliance manager assessments, data subject requests, and e-discovery workflows.

Use exchange online transport rules to enforce an ethical wall between groups, such as brokers and marketing, by blocking messages or routing them for approval.

Enforce retention across SharePoint, OneDrive, mail, Exchange, and Teams with org-wide policies up to 10, preserving or deleting data via preservation holds and recoverable items.

Create a retention policy in the security and compliance center to retain or delete content by duration or location, with advanced rules and preservation lock; note separate policies for teams.

Explore how data loss prevention across Microsoft 365 protects documents in OneDrive for Business, SharePoint, and Teams by identifying sensitive information, applying context-based conditions, and enforcing blocking, notifications, and reports.

Create data loss prevention policies in the security and compliance center using templates such as PCI, apply across the environment, configure policy tips, notifications, and optional overrides.

Enable policy tips in Outlook for data loss prevention, and ensure users see them before sending restricted content; lower thresholds and verify notifications and full Office suite installation.

Plan Azure information protection across four subscription levels, enable the service in the Azure portal, define labels and automated policies, deploy the AIP client, and train users.

Enable the Azure information protection super user to decrypt protected content when needed by installing the Azure Active Directory Rights Management module for PowerShell and adding users or groups.

Explore options for the AIP tenant key, including Microsoft managed keys in Azure Key Vault, bring your own key with on-prem AD RMS, or hold your own key.

Learn to create and apply Azure Information Protection labels to encrypt documents, set custom permissions, and enforce policies through global and broker policies, including automatic labeling with P2.

Use Windows information protection to separate corporate and personal data, encrypt corporate data, and enable selective app access and remote wipe via Intune or Office 365 MDM.

Identify prerequisites for Windows information protection, including Windows 10 version 1607+ and enrollment in MDM or MAM, and distinguish trusted vs untrusted apps, sites, and enlightened vs unenlightened apps.

Implement Windows Information Protection in the Azure portal by creating an app protection policy for Windows 10 with MDM to protect Office 365 data and block work product from pasting.

Learn how content search scans the environment including emails, documents, SharePoint, and instant messaging at scale, with estimates, without full eDiscovery or admin rights, requiring only the eDiscovery manager role.

Create and run content searches in the Security and Compliance Center, using guided or standard search, specify locations and keywords, preview results, and export reports.

Master advanced e-discovery in Microsoft 365 by defining data custodians, applying preservation holds, and using deep indexing, searches, and review sets to export relevant custodial and noncustodial content for litigation.

Auditing in Microsoft 365 tracks user and administrative activity across Teams, SharePoint, and OneDrive, once enabled in Security and Compliance Center, with 90-day retention unless extended via Azure Log Analytics.

Learn how to perform audit log searches in the Security and Compliance Center, filter by IP and activity types, and export results within 90 days, including handling large datasets.

Set up an audit policy in SharePoint Online to track edits, additions, deletions, and other document-related actions by configuring content types and enabling auditing.

Explore cloud-based device management with Microsoft 365 by integrating on-premises Configuration Manager with mobile device management and Azure Active Directory, enabling modern management, conditional access, and cloud update deployment.

Synchronize on-premises AD with Azure AD via Azure AD Connect to enable co-management, and ensure SCCM 1709+ and Intune in the cloud, with devices joined to both directories.

Enable co-management by linking on-premises System Center Configuration Manager with a cloud-based Intune environment, configure automatic enrollment, and manage devices via workloads, pilot groups, and MDM precedence.

Explore co-management with on-premises System Center and cloud Intune, moving workloads such as compliance policies, resource access, email, and Windows updates to the cloud.

Explore how the Microsoft Store for Business enables private app distribution to Windows 10 devices. Streamline centralized management of licenses, bulk purchases, and automatic updates for internal and line-of-business apps.

Configure the Microsoft Store for Business by meeting prerequisites like internet connectivity, Windows 10 devices, and an Azure Active Directory administrator account, then activate the private store and assign applications.

As global admin, manage store for business settings, assign roles like admin and purchaser, publish apps, invite publishers, block basic purchasers, shop for groups, and reclaim licenses when needed.

Explore mobile application management across Android, iOS, and Windows 10 with app protection policies to secure corporate data in apps, even on non-enrolled devices, via Intune and Configuration Manager.

Configure mobile application management via the Azure portal and Intune to enroll users. Select a group for the MAM user scope, such as finance, and save to enforce policies.

Learn how Azure Active Directory enables single sign-on to thousands of SaaS apps by provisioning, assigning apps like Box to users, and configuring SAML or password-based sign-in.

Plan for Windows as a service by balancing six-month feature releases with monthly quality updates. Choose between semiannual, semiannual targeted, and long term servicing channels for medical equipment environments.

Explore Windows 10 deployment models, including modern deployment with autopilot, in-place upgrades, and dynamic enrollment, to streamline device provisioning, upgrades, and Azure AD joined managed environments.

Plan subscription activation to upgrade Windows 10 Pro devices to Enterprise using a license, Azure AD or on-prem AD DS, up to five devices, with rollback after 90 days.

Learn how to mitigate Windows 10 in-place upgrade errors by removing non-essential software and hardware, updating firmware and drivers, verifying storage, and using the setup diag tool.

Discover how mobile device management secures corporate resources across Windows, iOS, and Android by enrolling devices, enforcing policies, monitoring compliance, and selectively wiping data.

activate mobile device management (MDM) for Office 365 or Intune, choose your MDM authority, and enroll devices through Intune to complete the setup.

Configure MDM in Microsoft 365 by enabling mobile device management, updating DNS for enterprise enrollment and enterprise registration, and handling device enrollment for Apple, Android, and Windows devices.

Configure mobile device management policies with security baselines, device configuration and compliance policies for android and windows devices, including os version ranges, tags, and educating actions for noncompliance.

Create conditional access policies to enforce mobile device management by requiring MFA and user groups, sign-in risk, location, device state, and app type, before granting or blocking access.

Enroll devices for MDM across Windows 10, Android, and Apple using group policy, Azure AD join, provisioning packages, and the company portal, including the Apple device enrollment program.

Monitor enrolled devices in the mobile device management portal, view compliant device details (name, ownership, OS version, apps), and remotely wipe, sync, restart, or re-register as needed.

Explore how the secure score boosts security posture across the 365 environment, use threat intelligence to anticipate threats, and extend BYOD device management with Office 365 mobile device management.

Discover the role of a SharePoint Online site owner and learn to create sites, configure settings, build libraries and lists, set permissions, and manage navigation and regional settings.

As a site owner, you create sites, build libraries and lists, and manage permissions. You design pages and navigation, including top links and the quick launch, for easy access.

Minimize or avoid folders in SharePoint to improve search, views, and automation. Leverage metadata and columns to enable filtering, indexing, and workflow routing.

Create your own SharePoint sites in Office 365, choosing between team sites and communication sites, and understand the impact of Office 365 groups and admin center options.

Create a communication site from the SharePoint app by selecting a design, naming the site, setting address, and finishing to generate showcase, topic, or blank site with documents and events.

Create a team site in SharePoint backed by an Office 365 group to enable collaboration, with public or private privacy and configurable owners and members, plus group versus SharePoint permissions.

Create a subsite from site contents, select a template (team site or other), and configure permissions. Inherit the top navigation from the parent site to keep users oriented.

Learn how to access site information, update logos and names, manage permissions and regional settings, and navigate modern versus classic SharePoint site options.

Customize a SharePoint site's look by applying themes and header navigation to match corporate branding. Explore site designs and adjust logo, background, footer, and navigation for team or communications sites.

Learn how to add apps in SharePoint from the gear or new button, and see how apps enable modern templates for lists, libraries, and calendars in team vs. communication sites.

Create a document library quickly from a team or communication site, name it, and understand how a short, unique library name generates the URL.

Delete and restore a library or list in SharePoint 365 via site contents or the recycle bin. Office 365 group team sites allow up to 60 days to restore.

Update the library name and description in library settings via name description and navigation. Keep the url short and consider using quick launch links for different views.

Learn how to enable and configure SharePoint versioning, choose major or major/minor versions, control draft visibility, and set how many versions to retain.

Enable versioning in SharePoint, view version history, and track who changed what and when, including major or minor versions. Restore a previous version in the browser or desktop app.

Site owners can override checkouts, discard checkouts, and take ownership to finalize files. Use metadata and the manage files with no checked in version option to ensure visibility.

Explore modifying advanced library settings in SharePoint to control default open behavior, folder creation, search visibility, indexing, sync, and the choice between modern and classic views.

Enable content approval in library settings to keep items pending until approved, and limit draft visibility to editors, approvers, or the author based on major and minor versions.

Add templates in the modern SharePoint interface by selecting a document and creating template-based production reports, then edit the new menu to tailor options.

Learn to create libraries and lists in SharePoint, distinguish custom lists from template lists, and select the appropriate type via new > list, noting classic view considerations.

Delete a library by using site contents or library settings, then recover it within 30 days from recycle bin or second stage recycle bin, noting some items can't be deleted.

Create a list from blank or a template in SharePoint by using the list option, leveraging an existing list as a template, and following naming and navigation best practices.

Create calendar lists in SharePoint to view events in Outlook, with all-day and recurring options, while noting they live in classic view and can overlay multiple calendars.

Turn on or off the group calendar option to share members' schedules from Outlook, and retroactively apply changes via the calendar list settings.

Create a SharePoint task list to track tasks and sync completions with Outlook. Avoid forcing the modern view; keep the classic view for reliable task management.

Open the list settings from site contents, rename the list and update its description, then save. Optionally add the list to quick launch navigation for easy access.

Enable versioning on your lists to track changes with version history, selecting major or minor increments as needed. Learn where to turn on versioning, approve pending items, and manage visibility.

Learn to adjust advanced list settings in SharePoint, including content type management, item level permissions, attachments, search visibility, and the default experience to balance security and usability.

Learn how to create public views in SharePoint lists and libraries by configuring columns, sorting, and filters, and choosing public versus personal audience in both classic and modern interfaces.

Create calendar views in SharePoint lists by selecting a time interval from a date field and choosing a display field like title; publish publicly and note modern versus classic quirks.

Create a map view in SharePoint using a location column and coordinates, learn to configure a public view, sorting by date, and the difference between classic and modern experiences.

Set the default view for a SharePoint list or library using current view or settings to ensure the view loads by default, and manage views with web parts.

Explore creating grouped views to organize data like folders without using folders, by grouping on state and mode of viewing, and saving multi-level collapsible views.

Create a flat library view by hiding folders and showing all items without folders, using library settings to build a standard view named no folders.

Learn how SharePoint columns enable metadata to describe list and library items, including column types, site versus list columns, and using lookups, calculations, and location fields to improve data cohesion.

Learn to create a site column at the site level, add it to multiple lists and libraries, and manage updates that propagate across a site collection.

Add an existing site column to a library or list by opening settings, selecting add from existing site columns, and choosing the desired column to apply across content types.

Learn to modify, rename, and delete a site column in Microsoft 365, including navigating site settings, handling content type dependencies, and risks of orphaned columns.

Create a lookup column to connect a projects list with a project tasks list, pulling information from the projects list and enforcing relationships to prevent deletions and expose start dates.

Learn to create calculated columns in SharePoint lists, perform arithmetic like quantity times price, and build formulas using if statements and text concatenation to summarize data.

Create a location column in the modern SharePoint view to capture addresses, which provides suggestions, stores street, city, and state, and supports mapping with map view and Power BI.

Understand SharePoint permissions, inheritance, and how to break it safely. Learn role levels (read, view only, contribute, edit, full control) and best practices for group-based access.

Explore viewing and editing SharePoint site permissions across top and sub sites, including how Office 365 groups affect access. Manage owners, members, visitors, and sharing settings with advanced permissions.

Learn to view, add, and remove users in SharePoint groups using team sites and the advanced permissions settings, including using the share feature, site permissions, and the add users button.

Learn to create additional SharePoint groups, manage advanced permissions, and assign ownership to the site owners group to split member access and control who can edit group memberships.

Access advanced permissions to rename a group or change its owner, adjust member access from the group settings, and note that some groups, especially 365 groups, may not be changeable.

Open advanced permissions and use check permissions to view a user's access on the site. See their groups and the highest permission, such as full control.

Learn how to break inheritance and create unique permissions for a subsite in SharePoint by stopping inheritance, generating new groups for visitors, members, and owners, and adjusting access.

Learn to break permissions on a library or list, stop inheriting, adjust visitors and members access, set contribute level access, and re-inherit or grant individual access when needed.

Explore creating and removing unique permissions for a file or folder in SharePoint, manage access via links or direct access, and stop inheriting permissions to control who sees what.

Learn to work with SharePoint site pages, compare them to legacy wiki and web pages, and customize layouts, sections, and web parts with save as draft and publish options.

Edit your SharePoint site pages by adding text with a web part, using the formatting pallet to apply headings, bold, lists, colors, tables, hyperlinks, and even embed code.

Learn to insert and configure web parts on a page, choosing document libraries, lists, embeds, and other dynamic content.

Create SharePoint site pages using the new page option, choose templates, and publish or save as draft; add pages to navigation and manage them in the site pages library.

Add site pages to the quick launch or top links for easy access. Use promote or copy the URL to create a one-click navigation from the home page.

Configure regional time and work week settings in SharePoint to display dates and times in the user's locale. Set time zone and calendars per site to ensure accurate regional presentation.

Sub sites inherit top links from the parent to keep navigation consistent across the site collection. Configure the top link bar and editing options to return to the top site.

Configure the quick launch in SharePoint’s left navigation by editing, dragging to reorder, removing links, and adding new hyperlinks; each site maintains its own local quick launch.

Learn to own a Microsoft 365 site by balancing permissions, assigning groups as site owners, and building navigable libraries with full metadata for easy findability.