MS-101: Microsoft 365 Mobility and Security

Learn how you can strengthen your security posture through Azure Security Center.

Microsoft Cloud App Security is a Cloud Access Security Broker (CASB) that operates on multiple clouds. It provides rich visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all your cloud services. Learn how to use Cloud App Security in your organization.

Learn about messaging role groups, admin roles, role-based access control, and how you can use eDiscovery in Exchange Online.

Learn how to plan, implement, and configure policies to protect your organization from malware, spam, and phishing.

Learn how compliance works in Exchange Online. Learn how to use retention and data loss prevention policies to keep the data and communications you’re required to maintain, how to find that data and communications, and how to ensure you’re ready for an audit.

Learn how to manage your content lifecycle using solutions to import, store, and classify business-critical data so you can keep what you need and delete what you don’t.

Learn the key considerations for transitioning your organization from using Azure Information Protection to Microsoft Information Protection.

Learn how to discover, classify, and protect sensitive and business-critical content throughout its lifecycle across your organization.

Learn how Microsoft 365 information protection and governance solutions help you protect and govern your data, throughout its lifecycle – wherever it lives, or wherever it travels.

Learn how to use intelligent classification to automate and simplify the retention schedule for regulatory, legal, and business-critical records in your organization.

Learn about the information available to help you understand your data landscape and know your data.

Learn how to detect sensitive content as it’s used and shared throughout your organization, in the cloud and on devices, and help prevent accidental data loss.

eDiscovery offers built-in tools such as Content Search to help identify data used as evidence in legal cases. Content Search helps identify relevant data directly in Microsoft 365, reducing the amount of data that customers need to prepare and export to their third-party compliance tools. Advanced eDiscovery builds on the core eDiscovery solution, helping organizations respond more quickly with a streamlined end-to-end eDiscovery workflow, intelligent search capabilities to decrease manual work, and save on third-party storage costs.

Microsoft 365 delivers comprehensive audit logs and alerts across more than 15 services, which enables customers to track user and administration activity within their tenants. Improvements in Advanced Auditing in Microsoft 365 include preservation of audit logs for up to a year, faster access to data, and access to crucial events for quicker investigations.

Learn how Microsoft 365 procures, monitors, and manages subprocessors to help protect data from unauthorized access and inappropriate use.

Learn how Microsoft 365 investigates, manages, and responds to security concerns to protect customers and the Microsoft 365 cloud environment.

Learn about how Microsoft 365 uses comprehensive audit logging and monitoring to support security monitoring, maintain service availability, and meet compliance requirements.

Learn how Microsoft 365 implements the principle of Zero Standing Access (ZSA) to protect production environments and customer data using Just-In-Time (JIT) and Just-Enough-Access (JEA).

Learn how the architecture of Microsoft 365 implements security and privacy features to protect customers who use Microsoft 365 multi-tenant services.

Learn how Microsoft 365 follows Microsoft’s Security Development Lifecycle (SDL) to build security and privacy into our products and services.

Learn about Microsoft 365 privacy standards, the reasons we have them in place, and how they differentiate Microsoft in protecting and respecting customer data.

Learn how Microsoft implements organization-wide security and privacy governance to support the secure operation of Microsoft 365 services and maintain compliance with regulatory requirements and customer commitments.

Learn how Microsoft 365 builds resilient services to meet customer expectations in the face of faults and challenges to normal operations, maintains optimal service availability, and fulfills business continuity requirements.

Learn how Microsoft uses Defense-In-Depth to secure our datacenters against unauthorized access, environmental hazards, and other physical threats, as well as how Microsoft implements resilient architecture, business continuity, and disaster recovery to maintain the availability of our services.

Learn how Microsoft 365 identifies, assesses, responds to, and manages risks to protect customers and the Microsoft 365 environment.

Learn how Microsoft 365 encrypts data at rest and in transit, securely manages encryption keys, and provides key management options to customers to meet their business needs and compliance obligations.

Learn how Microsoft 365 proactively monitors information system assets for vulnerabilities, assesses the risks associated with discovered vulnerabilities, and remediates them in a timely manner.

Throughout this module, you will learn about the key concepts and benefits of modern management with Microsoft 365. We will explore the four key pillars to modern management, and how they can help your organization manage all their devices in a modern way that is easy to deploy, up-to-date, secure and intelligent.

During the course of this module, you will learn about Windows Autopilot and the benefits it can provide to modern IT organizations. From the very beginning, to the very end of a device’s lifecycle; Windows Autopilot is an essential tool to reduce the burden on IT teams when registering, resetting, and recovering devices.

This module will introduce you to the modern device management options for Windows 10 from Microsoft 365, including co-management, Microsoft Intune, and Mobile Device Management (MDM) for Office 365.

Co-management is one of the primary ways to attach your existing Configuration Manager deployment to the Microsoft 365 cloud. It helps you unlock additional cloud-powered capabilities like conditional access.

Managing applications on devices in your organization is key to a secure and productive application ecosystem. Microsoft Intune is a cloud-based service that helps enable your workforce to be productive anywhere and, on any device; while keeping your corporate data protected. In this module, we will learn about considerations for implementing Mobile Application Management (MAM) and manage MAM policies in Intune.

To keep computers that run Windows 10 stable and protected, you must update them regularly with the latest features, security updates, and fixes. To utilize Windows Update effectively, you must be aware of the configuration options that Windows Update has available, and you must guide users on how to configure these options.

Learn about how attackers most commonly breach organizations–and the Microsoft tools that protect your organization in an ever shifting landscape.

Learn how new threat protection tools from Microsoft protect your organization’s users, devices, and data from attempted attacks.

Learn about the Office 365 Advanced Threat Protection component of Microsoft Threat Protection.

Learn about the Azure Advanced Threat Protection component of Microsoft Threat Protection.

Learn how identity and access management work in Microsoft 365.

Learn how to use Microsoft 365 authentication tools for access and identity provisioning.

Learn how to strengthen authentication across your enterprise deployment with security tools from Microsoft 365.

Learn how to protect the most important credentials in your enterprise ecosystem – administrator credentials.

Learn how to promote an enterprise-wide security mindset with Microsoft 365.

Learn about the Zero Trust model and how to implement Zero Trust into your organization.

Learn how the security management tools from Microsoft help you protect your organization’s users, devices, and data.

Learn how to take advantage of the reporting and insights available through the Microsoft 365 security center to drive organizational security health.

Learn how Office 365 Advanced Threat Protection (ATP) helps safeguard your organization against unknown malware, viruses, and harmful email links and attachments.

Learn how to mitigate end-point threats by using Windows 10 security features.

Discuss the basic concepts for protecting your infrastructure and data when you work in the cloud. Understand what responsibilities are yours and what Azure takes care of for you.

Create security baselines

In this module, you’ll discover how to detect and respond to threats with Azure Security Center.

In this module, you’ll use the alert capabilities of Azure Security Center to watch for and respond to threats.

In this module, you’ll discover how to protect VMs and servers with Azure Security Center

Use Azure Monitor logs to extract valuable information about your infrastructure from log data.

Respond to incidents and activities in your infrastructure through alerting capabilities in Azure Monitor.

Use application logs in Azure Web Apps to help debug web app code.

Learn how Azure can help you protect the workloads you run both in the cloud and in your on-premises datacenter.