MS-102 Microsoft 365 Administrator Training

Module 21: Examine Email Protection in Microsoft 365

1. Understand the anti-malware and anti-spam pipeline

2. Implement Zero-hour Auto Purge (ZAP) to detect threats

3. Explore Exchange Online Protection (EOP) anti-spoofing

4. Configure outbound spam filtering

5. Strengthen message hygiene for inbound and outbound traffic

Module 22: Enhance Email Protection with Microsoft Defender for Office 365

1. Expand EOP with Safe Attachments and Safe Links

2. Configure policies to detect spoofing and phishing

3. Submit messages and files for analysis

4. Create custom outbound spam and anti-phish policies

5. Manage user access to reported threats

Module 23: Manage Safe Attachments

1. Configure Safe Attachment policies using the portal

2. Create Safe Attachment policies with PowerShell

3. Modify and audit existing policies

4. Create transport rules to bypass scanning when necessary

5. Understand the end-user experience and notification behavior

Module 24: Manage Safe Links

1. Create Safe Links policies for email and Office apps

2. Configure policies via Defender portal and PowerShell

3. Modify and prioritize Safe Links rules

4. Bypass Safe Links scanning with transport rules

5. Analyze how users interact with Safe Links

Module 25: Explore Threat Intelligence in Microsoft Defender XDR

1. Use Microsoft Intelligent Security Graph for threat visibility

2. Configure and manage alert policies in Microsoft 365

3. Automate threat responses and investigations

4. Perform advanced threat hunting in Defender XDR

5. Analyze insights using Threat Analytics

Module 26: Implement App Protection with Microsoft Defender for Cloud Apps

1. Deploy and integrate Microsoft Defender for Cloud Apps

2. Configure file policies for data protection

3. Use alerts and incident response features

4. Implement and monitor Cloud Discovery

5. Troubleshoot app visibility and risk issues

Module 27: Implement Endpoint Protection with Microsoft Defender for Endpoint

1. Onboard and configure devices in Microsoft Defender

2. Deploy Defender policies via Microsoft Intune

3. Assess vulnerabilities with Defender Vulnerability Management

4. Enable device discovery and inventory

5. Reduce attack surface across endpoints

Module 28: Implement Threat Protection with Microsoft Defender for Office 365

1. Understand the protection stack and policy structure

2. Configure Threat Explorer and Trackers for investigation

3. Set up Attack Simulation Training

4. Identify and respond to ongoing threats

5. Align policies with business risk tolerance

Module 29: Examine Data Governance in Microsoft Purview

1. Explore Microsoft Purview Information Protection and lifecycle tools

2. Implement data classification and sensitivity labels

3. Minimize internal risk using Insider Risk Management

4. Manage legal holds and eDiscovery

5. Understand the full data governance lifecycle

Module 30: Explore Archiving and Records Management

1. Enable and manage archive mailboxes

2. Implement Microsoft Purview Records Management

3. Configure retention labels and policies for records

4. Restore deleted data from Exchange and SharePoint

5. Ensure regulatory compliance with retention

Module 31: Explore Retention in Microsoft 365

1. Compare retention policies and retention labels

2. Define scopes, retention periods, and triggers

3. Implement Preservation Lock for critical policies

4. Apply policies using compliance center and PowerShell

5. View retained items and audit history

Module 32: Explore Microsoft Purview Message Encryption

1. Configure Microsoft Purview Message Encryption (OME)

2. Create mail flow rules to enforce encryption

3. Add custom branding for secure emails

4. Explore advanced encryption options and scenarios

5. Ensure secure sharing inside and outside the organization

Module 33: Explore Compliance in Microsoft 365

1. Plan your compliance and data protection strategy

2. Use Microsoft Purview Compliance Manager to assess readiness

3. Implement controls aligned with compliance frameworks

4. Analyze and improve the Microsoft Compliance Score

5. Monitor audit logs and regulatory compliance posture

Module 34: Implement Microsoft Purview Insider Risk Management

1. Understand use cases for Insider Risk Management

2. Plan and configure policies and data indicators

3. Investigate and manage insider alerts

4. Collaborate with HR and legal teams

5. Review and close insider risk cases

Module 35: Implement Microsoft Purview Information Barriers

1. Configure Information Barriers to prevent data leaks

2. Apply barriers to Teams, SharePoint, and OneDrive

3. Understand user segmentation logic and restrictions

4. Monitor barrier policies and violations

5. Ensure compliance with industry regulations

Module 36: Explore Microsoft Purview Data Loss Prevention

1. Understand DLP policy use cases across workloads

2. Explore Endpoint DLP and Adaptive Protection

3. View DLP activity using logs and dashboards

4. Protect sensitive data from exfiltration

5. Monitor and fine-tune policy results

Module 37: Implement Microsoft Purview Data Loss Prevention

1. Deploy default and custom DLP policies

2. Use templates for fast DLP implementation

3. Configure email alerts and policy tips

4. Define DLP rules and conditions

5. Audit and validate DLP incidents

Module 38: Implement Data Classification of Sensitive Information

1. Classify data using built-in and trainable classifiers

2. Detect sensitive data with document fingerprinting

3. View content analytics in Content Explorer

4. Use Activity Explorer for behavior insights

5. Customize classification rules for your organization

Module 39: Explore Sensitivity Labels

1. Define the role of sensitivity labels in data protection

2. Determine label scopes and content types

3. Configure automatic and recommended labeling

4. Assign label policies to users or groups

5. Understand label impact on email and documents

Module 40: Implement Sensitivity Labels

1. Plan and test label deployment strategy

2. Enable label support in SharePoint and OneDrive

3. Create, publish, and manage sensitivity labels

4. Set up label-based encryption and permissions

5. Remove and retire labels when no longer needed