What this book covers

This book covers every exam objective outlined in the MS-101 exam's documentation. Each chapter represents an exam objective, divided among three parts, representing the skills measured in the exam: 

Section 1, Modern Device Services (30-35% of the exam):

Chapter 1, Implementing Mobile Device Management (MDM), introduces you to planning for mobile device management (MDM), configuring MDM integration with Azure AD, setting an MDM authority, and setting the device enrollment limit for users.

Chapter 2, Managing Device Compliance, explores how to plan for device compliance; configure device compliance policies; and design, create, and manage conditional access policies.

Chapter 3, Planning for Devices and Apps, teaches you how to prepare your organization's Microsoft Store for Business, plan app deployment, device comanagement, device monitoring, device profiles, mobile application management (MAM), and mobile device security.

Chapter 4, Planning Windows 10 Deployment, looks at planning for Windows as a Service (WaaS), planning your  Windows 10 deployment method, analyzing Windows 10 upgrade readiness, and evaluating and deploying Windows 10 security features.

Section 2, Microsoft 365 Security and Threat Management (30-35% of the exam):

Chapter 5, Implementing Cloud App Security (CAS), looks at designing and configuring Cloud App Security (CAS) and its policies, configuring connected apps, managing CAS alerts, and uploading CAS traffic logs.

Chapter 6, Implementing Threat Management, shows you how to plan a threat management solution, design and configure Azure Advanced Threat Protection (ATP) and Microsoft 365 ATP policies, and monitor Advanced Threat Analytics (ATA) incidents.

Chapter 7, Implementing Windows Defender ATP, shows you how to plan your Windows Defender ATP solution, configure preferences, implement policies, and enable security features of Windows 10.

Chapter 8, Managing Security Reports and Alerts, shows you how to manage the service assurance dashboard, use tracing and reporting on Azure AD Identity Protection, and configure and manage Microsoft 365 and Azure Identity Protection alerts.

Section 3, Microsoft 365 Governance and Compliance (35-40% of the exam):

Chapter 9, Configuring Data Loss Prevention (DLP), explores how to design and configure data loss prevention (DLP) policies, manage DLP exceptions, and monitor and manage DLP policy matches.

Chapter 10, Implementing Azure Information Protection (AIP), teaches you how to plan your Azure Information Protection (AIP) solution, deploy the on-premises rights management connector, plan for Windows Information Protection (WIP) and classification labeling, configure Information Rights Management (IRM) for workloads, configure the superuser, deploy AIP clients, implement AIP policies, and implement your AIP tenant key.

Chapter 11, Managing Data Governance, shows you how to configure information retention, plan for Microsoft 365 backups, restore deleted content, and plan information retention policies.

Chapter 12, Managing Auditing, teaches you how to configure audit log retention, your audit policy, and monitor unified audit logs.

Chapter 13, Managing eDiscovery, enables you to search for content using the Security and Compliance center, plan for in-place and legal holds, and configure e-Discovery.

Section 4, Mock Exams

Chapter 14, Mock Exam 1, contains 20 questions to help you prepare for the exam.

Chapter 15, Mock Exam 2, contains another 20 questions to further help you prepare for taking MS-101.