MS-102: Microsoft 365 Enterprise Administrator Expert Practice Test
This exam retires on Monday, November 30, 2026.
Microsoft has not announced a direct replacement.
Build your confidence for MS-102: Microsoft 365 Enterprise Administrator Expert. Practice the concepts, understand the answers, and strengthen your knowledge one question at a time.
Try a sample questionExam overview and details
The MS-102: Microsoft 365 Enterprise Administrator Expert Practice Test is designed for IT professionals who aspire to validate their expertise in managing and securing enterprise-level Microsoft 365 environments. This certification exam, officially titled 'Microsoft 365 Administrator Expert,' is a cornerstone credential for administrators responsible for deploying, configuring, and maintaining Microsoft 365 tenants, identity and access management via Microsoft Entra ID, compliance through Microsoft Purview, and security using Microsoft 365 Defender. The exam also covers the administration of Microsoft 365 Apps and collaboration tools, ensuring candidates can optimize productivity while maintaining robust security postures. Achieving this certification demonstrates a comprehensive understanding of hybrid and cloud-native environments, including advanced threat protection, data governance, and identity synchronization. For organizations, this credential signals that a professional can manage complex, multi-workload deployments and respond to evolving security challenges. The practice test includes 184 questions that mirror the exam's depth and breadth, covering real-world scenarios such as configuring conditional access policies, implementing data loss prevention (DLP), managing Microsoft Teams governance, and responding to incidents with Microsoft 365 Defender. This certification is ideal for current Microsoft 365 administrators, security engineers, and compliance managers seeking to advance their careers and gain industry recognition as enterprise-level experts.
Sample Questions
Choose an answer and explore the explanation to see how practice works.
A Microsoft 365 administrator is planning a rollout and needs to identify sensitive data and apply automatic labeling to Data Map assets. Which option directly matches this requirement?
A Microsoft 365 administrator is planning a rollout and needs to monitor Microsoft 365 service health and configure health notifications. Which option directly matches this requirement?
For an MS-102 practice scenario, the administrator must identify the service for Office 365 protection within Defender XDR services. What should the administrator use or configure?
An operations team asks for help to review tenant network connectivity information. Which capability from the source addresses the request?
A Microsoft 365 administrator is planning a rollout and needs to administer tenant users and their license assignments. Which option directly matches this requirement?
Career Opportunities & Salary
Exam insights and study advice
Earning the MS-102 certification is a strategic career move that positions you as a top-tier Microsoft 365 Enterprise Administrator Expert. In today's digital landscape, organizations rely on Microsoft 365 for critical operations, and the demand for professionals who can secure, govern, and optimize these environments is at an all-time high. This certification validates your ability to architect and manage identity solutions with Microsoft Entra ID, enforce compliance with Microsoft Purview, and defend against advanced threats using Microsoft 365 Defender-skills that are directly aligned with industry needs for zero-trust security and regulatory compliance. By achieving this credential, you distinguish yourself from general administrators, demonstrating mastery of enterprise-scale challenges such as hybrid identity, data classification, and incident response. This recognition often leads to higher-level roles such as Security Administrator, Compliance Manager, or Cloud Architect, and can result in significant salary increases. Moreover, the MS-102 is a prerequisite for the Microsoft 365 Certified: Enterprise Administrator Expert certification, which is widely recognized by employers as a gold standard for cloud management expertise. In a competitive job market, this certification proves you have the hands-on experience and strategic knowledge to drive business outcomes while mitigating risk.
What this exam covers
Use the published domain weights to plan your study. Practice results do not predict your certification exam score.
01Manage security and threats by using Microsoft Defender XDR
Domain 3, Manage security and threats by using Microsoft Defender XDR, organizes related decisions rather than isolated product facts. The current outline includes Review and respond to security reports and alerts generated by Microsoft Defender XDR; Implement and manage email and collaboration protection by using Microsoft Defender for Office 365; Implement and manage endpoint protection by using Microsoft Defender for Endpoint. Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Review and respond to security reports and alerts generated by Microsoft Defender XDR
- Implement and manage email and collaboration protection by using Microsoft Defender for Office 365
- Implement and manage endpoint protection by using Microsoft Defender for Endpoint
- Implement and manage Microsoft Defender for Cloud Apps
Learning objectives
- Review and respond to security reports and alerts generated by Microsoft Defender XDR: Review and respond to threats by using Microsoft Security Exposure Management, including the Microsoft Secure Score; Review and respond to incidents and alerts generated by Microsoft Defender XDR, including advanced hunting; Review and respond to issues identified in Microsoft Defender XDR reports; Review and respond to threats identified by Microsoft Defender Threat Intelligence
- Implement and manage email and collaboration protection by using Microsoft Defender for Office 365: Implement threat policies and rules in Microsoft Defender for Office 365; Configure alert policies in Microsoft Defender for Office 365; Investigate and respond to email and collaboration threats by using Microsoft Defender for Office 365; Manage attack simulations, including training campaigns; Manage restricted entities, including blocked users
- Implement and manage endpoint protection by using Microsoft Defender for Endpoint: Onboard devices to Microsoft Defender for Endpoint; Configure endpoint settings; Review and respond to vulnerabilities identified in the Microsoft Defender Vulnerability Management dashboard
- Implement and manage Microsoft Defender for Cloud Apps: Configure the app connector for Microsoft 365; Configure Microsoft Defender for Cloud Apps policies, including triggering alerts; Interpret activity log; Configure Cloud App Discovery; Review and respond to issues identified in Cloud App Discovery
02Deploy and manage a Microsoft 365 tenant
Domain 1, Deploy and manage a Microsoft 365 tenant, organizes related decisions rather than isolated product facts. The current outline includes Implement and manage Microsoft Entra identity and access; Manage users and groups. Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Implement and manage Microsoft Entra identity and access
- Manage users and groups
Learning objectives
- Implement and manage Microsoft Entra identity and access: Create a tenant; Implement and manage domains; Configure org settings, including Security & privacy and Organization profile; Monitor the health of Microsoft 365 services by using Service Health, including configuration of notifications; Configure and review Network connectivity insights; Configure and monitor software updates by using the Microsoft 365 admin center; Monitor Microsoft 365 adoption and usage; Configure and manage Microsoft 365 Backup
- Manage users and groups: Create and manage users in Microsoft Entra ID, including external users; Create and manage contacts in the Microsoft 365 admin center; Create and manage groups, including Microsoft 365 Groups and manage shared mailboxes; Manage and monitor Microsoft 365 licenses, including group-based licensing; Perform bulk user management, including Microsoft Graph PowerShell and Microsoft Entra PowerShell; Manage roles and role groups
03Implement and manage Microsoft Entra identity and access
Domain 2, Implement and manage Microsoft Entra identity and access, organizes related decisions rather than isolated product facts. The current outline includes Implement and manage identity synchronization with Microsoft Entra tenant; Implement and manage authentication; Implement and manage secure access. Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Implement and manage identity synchronization with Microsoft Entra tenant
- Implement and manage authentication
- Implement and manage secure access
Learning objectives
- Implement and manage identity synchronization with Microsoft Entra tenant: Prepare for identity synchronization, including IdFix; Implement and manage directory synchronization by using Microsoft Entra Connect Sync or Microsoft Entra Cloud Sync; Monitor synchronization by using Microsoft Entra Connect Health; Troubleshoot synchronization, including Microsoft Entra Connect Sync and Microsoft Entra Cloud Sync
- Implement and manage authentication: Implement and manage authentication methods; Implement and manage self-service password reset (SSPR); Implement and manage Microsoft Entra Password Protection; Investigate and resolve authentication issues
- Implement and manage secure access: Plan for identity protection; Implement and manage Microsoft Entra Identity Protection; Plan Conditional Access policies; Implement and manage Conditional Access policies; Implement and manage multifactor authentication (MFA) by using Conditional Access policies
04Manage compliance by using Microsoft Purview
Domain 4, Manage compliance by using Microsoft Purview, organizes related decisions rather than isolated product facts. The current outline includes Implement Microsoft Purview information protection and data lifecycle management; Implement Microsoft Purview data loss prevention (DLP). Practice by connecting the configuration or recommendation to prerequisites, downstream effects, evidence of success, and a safe correction when the expected result is not observed.
Topics
- Implement Microsoft Purview information protection and data lifecycle management
- Implement Microsoft Purview data loss prevention (DLP)
Learning objectives
- Implement Microsoft Purview information protection and data lifecycle management: Implement and manage sensitive information types by using keywords, keyword lists, or regular expressions; Implement retention labels, retention label policies, and retention policies; Implement sensitivity labels and sensitivity label policies; Monitor label usage by using Content explorer, Activity explorer, and label reports
- Implement Microsoft Purview data loss prevention (DLP): Configure DLP policies for Microsoft 365 workloads, including Exchange Online, SharePoint Online, OneDrive, Teams, Power BI, and Microsoft 365 Copilot; Configure Endpoint DLP; Review and respond to DLP alerts, events, and reports