MS-102 cheat sheet

Exam at a glance

Domain weightings

How much of the exam each domain covers. Spend your study time in proportion — the heavier the domain, the more questions you'll see.

Key terms

Microsoft 365 tenant

A Microsoft 365 tenant is a dedicated instance of the Microsoft 365 services and organizational data for a single organization. MS-102 covers creating and managing a tenant, its domains, and org settings.

Microsoft Entra ID

Microsoft Entra ID is Microsoft's cloud identity and access management service (formerly Azure AD). MS-102 covers identity synchronization, authentication, and secure access with Entra ID.

Entra Connect

Microsoft Entra Connect is the tool that synchronizes on-premises Active Directory identities to Microsoft Entra ID; Entra Cloud Sync is its lightweight agent-based alternative. MS-102 covers implementing and monitoring directory synchronization.

Entra Connect Health

Microsoft Entra Connect Health is a monitoring service that reports the health and synchronization status of directory-sync infrastructure. MS-102 covers using it to monitor synchronization.

Conditional access

Conditional access is a Microsoft Entra policy engine that grants or blocks access based on signals such as user, device, location, and risk. MS-102 covers planning and implementing Conditional Access policies, including MFA.

Multifactor authentication

Multifactor authentication (MFA) requires two or more verification factors to sign in. MS-102 covers implementing MFA through Conditional Access policies.

SSPR

SSPR (self-service password reset) is a Microsoft Entra feature that lets users reset their own passwords without help-desk involvement. MS-102 covers implementing and managing SSPR.

Microsoft Defender XDR

Microsoft Defender XDR is the extended detection and response suite unifying threat protection across identities, endpoints, email, and apps. MS-102 covers reviewing and responding to its incidents, alerts, and reports.

Defender for Office 365

Microsoft Defender for Office 365 protects email and collaboration from threats with policies such as Safe Attachments and Safe Links. MS-102 covers threat policies, alert policies, and attack simulations.

Defender for Endpoint

Microsoft Defender for Endpoint is an endpoint detection and response platform for onboarded devices. MS-102 covers onboarding devices, configuring settings, and responding to vulnerabilities.

Defender for Cloud Apps

Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that discovers and governs cloud app usage. MS-102 covers its app connector, policies, alerts, and Cloud App Discovery.

Secure Score

Microsoft Secure Score is a measurement of an organization's security posture with recommended improvement actions. MS-102 covers reviewing and responding to threats via Secure Score in Security Exposure Management.

Microsoft Purview

Microsoft Purview is Microsoft's data governance and compliance suite covering information protection, DLP, and data lifecycle management. MS-102 covers managing compliance with Purview.

Data Loss Prevention

Data Loss Prevention (DLP) is a Purview capability that detects and restricts sharing of sensitive information across Microsoft 365 workloads and endpoints. MS-102 covers DLP policies and responding to DLP alerts.

Sensitivity label

A sensitivity label is a Purview classification applied to content to enforce protection such as encryption and access limits. MS-102 covers sensitivity labels and label policies for information protection.