MS-102 exam domains
The MS-102 exam is weighted across 4 domains. Pick any domain below to drill it — or read the full breakdown in the FAQ.
| Exam domain | Exam weight | Practice |
|---|---|---|
| Deploy and manage a Microsoft 365 tenant | 27% | Practice this topic |
| Implement and manage Microsoft Entra identity and access | 27% | Practice this topic |
| Manage security and threats by using Microsoft Defender XDR | 33% | Practice this topic |
| Manage compliance by using Microsoft Purview | 13% | Practice this topic |
Sample MS-102 questions
A sample of the MS-102 questions on this hub. Each links through to the full question, the correct answer, and an explanation of why every other option is wrong.
- Your organization recently acquired a new business unit that owns the domain contoso-retail.com, registered with a third-party registrar. As the Micro…View question
- Contoso has a large Microsoft 365 tenant. The IT director wants regional help desk staff in the Berlin office to reset passwords and manage only the u…View question
- A security analyst at Contoso wrote a KQL query in Microsoft Defender XDR advanced hunting that identifies devices where a suspicious PowerShell comma…View question
- You are a Microsoft 365 administrator using Attack Simulation Training in Microsoft Defender for Office 365. After running a credential-harvest phishi…View question
- You are the Microsoft 365 administrator for Contoso. HR provides a CSV file containing 350 new employees with their display names, user principal name…View question
- Your organization uses Microsoft Entra Cloud Sync (not Connect Sync) to synchronize users from a single on-premises Active Directory forest. Users rep…View question
- Contoso has three separate Active Directory forests with no trust relationships between them, all needing to synchronize users to a single Microsoft E…View question
- Your organization requires that members of the Finance department use only phishing-resistant methods (such as FIDO2 security keys or Windows Hello fo…View question
- Contoso's security team reports that sign-in attempts are originating from a country where the company has no employees or business operations. Legiti…View question
- Your organization wants to block legacy authentication protocols (such as POP, IMAP, and older Office clients) because they cannot enforce MFA. Before…View question
Key MS-102 terms
Start with these terms, then explore the full glossary. Each links to a plain-English definition written for the MS-102 exam.
MS-102 frequently asked questions
What is the MS-102 certification?+
Microsoft positions the Microsoft 365 Administrator as the integrating hub for all Microsoft 365 workloads, coordinating identity, security, compliance, and endpoints.
It expects functional experience with all Microsoft 365 workloads and Microsoft Entra ID, plus working knowledge of networking, Active Directory Domain Services, DNS, and PowerShell.
What topics are on the MS-102 exam?+
The MS-102 exam is organised into four weighted domains. The percentages below are the midpoints of Microsoft’s published ranges (for example 30–35%), normalized to total 100, so treat them as a study-time guide. Managing security and threats with Defender XDR is the largest domain, with the tenant and identity domains close behind.
Deploy and manage a Microsoft 365 tenant (27%)
Covers implementing and managing a tenant (domains, org settings, service health, updates, Microsoft 365 Backup), managing users and groups (including external users, licensing, and bulk management with Microsoft Graph PowerShell), and managing roles and role groups including Privileged Identity Management.
Implement and manage Microsoft Entra identity and access (27%)
Covers identity synchronization with Entra Connect Sync or Cloud Sync (and monitoring with Connect Health), authentication (methods, SSPR, Password Protection), and secure access (Identity Protection, Conditional Access, and MFA).
Manage security and threats by using Microsoft Defender XDR (33%)
The largest domain. Covers responding to alerts and incidents in Defender XDR (Secure Score, advanced hunting, threat intelligence), email and collaboration protection with Defender for Office 365, endpoint protection with Defender for Endpoint, and Defender for Cloud Apps.
Manage compliance by using Microsoft Purview (13%)
Covers Purview information protection and data lifecycle management (sensitive info types, sensitivity and retention labels) and data loss prevention (DLP policies across Microsoft 365 workloads and Endpoint DLP, and responding to DLP alerts).
Is the MS-102 hard?+
MS-102 is an associate exam covering an unusually broad surface — tenant, identity, security, and compliance — so the challenge is breadth rather than depth in any one area.
The difficulty comes from the heavy Defender XDR domain and from scenario questions that hinge on the right identity-sync, Conditional Access, or Purview choice. Hands-on time in a Microsoft 365 tenant is the key.
How many questions are on the MS-102 exam and how long is it?+
Microsoft does not fix a single public question count for MS-102; it typically presents roughly 40–60 questions in a mix of formats — multiple choice, multiple response, and case studies — and Microsoft allots 100 minutes to complete the assessment.
Our full-length practice mock uses a 60-question, 100-minute session so you can rehearse pacing under realistic time pressure before test day.
What score do you need to pass the MS-102?+
Microsoft scores MS-102 on a scale of 1 to 1,000, and the passing score is 700. That is a scaled score rather than a raw 70%, because Microsoft adjusts for question difficulty, and there is no penalty for wrong answers, so you should never leave a question blank. Our practice mock uses a 70% threshold to give you a comparable target.
How much does the MS-102 exam cost?+
The MS-102 exam fee is set by Microsoft and varies by region — check the Microsoft certification page for current pricing. Microsoft associate certifications are valid for one year and can be renewed for free through an online assessment on Microsoft Learn. Everything on this hub is free.
Who should take the MS-102?+
MS-102 is aimed at Microsoft 365 administrators who manage a tenant end to end, and it is a required exam toward the Microsoft 365 Certified: Administrator Expert credential.
Microsoft recommends functional experience with all Microsoft 365 workloads and Entra ID, plus working knowledge of networking, AD DS, DNS, and PowerShell, though there is no formal prerequisite.
What jobs and salaries can the MS-102 lead to?+
MS-102 maps to roles such as Microsoft 365 administrator, cloud administrator, and collaboration or messaging administrator responsible for a Microsoft 365 tenant.
How much any certification affects pay depends heavily on geography, seniority, and hands-on experience, so treat any single salary figure with caution. MS-102 is best viewed as validation of Microsoft 365 administration skill rather than a guaranteed raise on its own.
How long does it take to study for the MS-102?+
Candidates with Microsoft 365 administration experience often need four to eight weeks; those newer to Entra, Defender, or Purview should plan longer. The most efficient path is to study each domain while configuring a Microsoft 365 tenant hands-on.
Review every explanation, including for questions you answered correctly, because MS-102 distractors are built from plausible but incorrect administration choices. Use the per-domain results here to find and shore up your weakest area, then finish with full-length timed mocks.
How should you prepare for the MS-102?+
Study the four domains above, giving the heaviest weight to Defender XDR security, then drill scenario questions domain by domain. Every MockAPI question reveals a full explanation and tells you why each wrong answer is wrong — essential for a broad exam that turns on exact Microsoft 365 admin choices.
When you can answer scenarios comfortably, move to full-length timed mocks alongside hands-on tenant practice. Use the glossary to keep concepts like Entra Connect, Conditional Access, and Purview DLP straight, and aim to score consistently above the pass mark before you book.
Can you take the MS-102 exam online?+
Yes. Microsoft delivers MS-102 through Pearson VUE, so you can test at a physical Pearson VUE centre or online with remote proctoring (OnVUE). The online exam requires a private, quiet room, a clear workspace, a webcam and microphone, a stable connection, and government-issued photo ID, with a proctor monitoring you and a room scan before you start.
If you do not pass, Microsoft requires a 24-hour wait before a second attempt; after that, a 14-day wait applies between further attempts, with a limit of five attempts in a 12-month period, and each attempt needs its own registration.
What certification should you take after the MS-102?+
MS-102 counts toward the Microsoft 365 Certified: Administrator Expert credential (paired with an Endpoint, Teams, or Identity and Access associate certification). Common companions include MD-102 (Endpoint Administrator) and SC-300 (Identity and Access Administrator).
For many, the real next step is owning a Microsoft 365 tenant in production. Pairing MS-102 with hands-on experience is what turns the certificate into a career.