Microsoft Entra Connect is the tool that synchronizes on-premises Active Directory identities to Microsoft Entra ID; Entra Cloud Sync is its lightweight agent-based alternative. MS-102 covers implementing and monitoring directory synchronization.
A Microsoft 365 tenant is a dedicated instance of the Microsoft 365 services and organizational data for a single organization.
Microsoft Entra ID is Microsoft's cloud identity and access management service (formerly Azure AD).
Microsoft Entra Connect is the tool that synchronizes on-premises Active Directory identities to Microsoft Entra ID; Entra Cloud Sync is its lightweight agent-based alternative.
Microsoft Entra Connect Health is a monitoring service that reports the health and synchronization status of directory-sync infrastructure.
Conditional access is a Microsoft Entra policy engine that grants or blocks access based on signals such as user, device, location, and risk.
Multifactor authentication (MFA) requires two or more verification factors to sign in.
SSPR (self-service password reset) is a Microsoft Entra feature that lets users reset their own passwords without help-desk involvement.
Microsoft Defender XDR is the extended detection and response suite unifying threat protection across identities, endpoints, email, and apps.
Microsoft Defender for Office 365 protects email and collaboration from threats with policies such as Safe Attachments and Safe Links.
Microsoft Defender for Endpoint is an endpoint detection and response platform for onboarded devices.
Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that discovers and governs cloud app usage.
Microsoft Secure Score is a measurement of an organization's security posture with recommended improvement actions.
Microsoft Purview is Microsoft's data governance and compliance suite covering information protection, DLP, and data lifecycle management.
Data Loss Prevention (DLP) is a Purview capability that detects and restricts sharing of sensitive information across Microsoft 365 workloads and endpoints.
A sensitivity label is a Purview classification applied to content to enforce protection such as encryption and access limits.