Microsoft 365 Certified: Administrator Expert credential artwork

Microsoft 365 Certified: Administrator Expert (MS-102) Exam Guide

Validates knowledge of administering Microsoft 365 tenants, including users, identity, security and compliance.

MS-102 tests whether you can administer a Microsoft 365 tenant, Entra identity, Defender XDR security and Purview compliance. Most of the exam is security and identity. Build each setting in a trial tenant and practise long scenario questions.

Understand the exam

Syllabus

Deploy and manage a Microsoft 365 tenant25–30%
  1. Implement and manage a Microsoft 365 tenant
  2. Manage users and groups
  3. Manage roles and role groups

Example scenario: Regional IT staff should manage users only in their own country. How would you delegate this?

Implement and manage Microsoft Entra identity and access25–30%
  1. Implement and manage identity synchronization with Microsoft Entra tenant
  2. Implement and manage authentication
  3. Implement and manage secure access

Example scenario: Users synced from on-premises AD cannot reset their passwords in the cloud. What would you check first?

Manage security and threats by using Microsoft Defender XDR30–35%
  1. Review and respond to security reports and alerts generated by Microsoft Defender XDR
  2. Implement and manage email and collaboration protection by using Microsoft Defender for Office 365
  3. Implement and manage endpoint protection by using Microsoft Defender for Endpoint
  4. Implement and manage Microsoft Defender for Cloud Apps

Example scenario: A user clicked a phishing link and the account is now sending spam. What would you do in Defender XDR and Defender for Office 365?

Manage compliance by using Microsoft Purview10–15%
  1. Implement Microsoft Purview information protection and data lifecycle management
  2. Implement Microsoft Purview data loss prevention (DLP)

Example scenario: Credit card numbers must not leave the company by email or Teams chat. Which Purview policy would you create?

Official MS-102 study guide · Skills measured as of April 28, 2026

Format

Questions
40–60
Duration
100 min
Passing score
700 / 1000
Delivery
Test centre or online
Languages
English, Chinese (Simplified), German, Spanish, French, Japanese, Portuguese

Question types

Choose the best answer from the options, or the stated number of answers when a question asks for more than one.

CertUp example

Credit card numbers must not leave the company by email. What should you create?

  1. A Microsoft Purview DLP policy for Exchange email
  2. A retention policy
  3. A Safe Attachments policy
  4. A Conditional Access policy
Show answer

A. A DLP policy detects sensitive information such as card numbers and blocks the message.

Eligibility and booking

Required for the certification

One Microsoft 365 or Entra associate certification

Required

You must earn one of these four associate certifications as well as passing MS-102.

Endpoint Administrator AssociateMD-102
Teams Administrator AssociateMS-700
Identity and Access Administrator AssociateSC-300
Information Security Administrator AssociateSC-401

Experience across Microsoft 365 workloads

Recommended

Microsoft expects functional experience with all Microsoft 365 workloads and Entra ID, plus working knowledge of networking, AD DS, DNS and PowerShell.

You can pass MS-102 before or after the associate. Both must be complete by November 30, 2026, when Microsoft stops awarding this certification.

You can book MS-102 until it retires on November 30, 2026. Sign in to Microsoft Learn with a personal Microsoft account and schedule with Pearson VUE from the exam page.

Make a study plan

This plan covers MS-102 only. Read the skills list and take the free practice assessment, then work through one course while you build each setting in a trial tenant.

Most candidates spend 60–90 hours. Plan for the low end if you already administer Microsoft 365 tenants daily; add time for Defender or Purview if you have not used them.

7 weeksto be ready
  1. 1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.4 h
  2. 3Learn the core conceptsWork through one main course or book, topic by topic.41 h
  3. 4Practice with mock examsTake timed practice tests and review every mistake.21 h
  4. 5Prepare for exam dayBook the exam and check the ID and delivery rules.4 h

Learn the core concepts

Use one course for coverage and build the settings yourself. Give Defender XDR the most time, since it carries the largest weight.

See all 4 MS-102 courses →

Use a trial tenant. Defender and Purview features need E5 licences. A Microsoft 365 E5 trial covers most of the exam; remove it when you finish.

Practice with mock exams

Take Microsoft's free practice assessment first, then a fuller question bank. Read every scenario to the end, since one detail can change the answer.

See all 2 MS-102 practice tests →

Are you ready?

  • You can choose the right Defender product and policy for an email, endpoint or app threat.
  • You can troubleshoot identity sync and Conditional Access sign-in problems.
  • You can pick the right admin role or role group with the least privilege.

Prepare for exam day

Choose the checklist for your test-centre or online appointment.

Before going to the test centre

  • Bring a current government-issued ID whose name matches your certification profile.
  • Arrive about 15 minutes early for check-in.
  • Store your belongings as instructed.
  • Book early. Appointments close when the exam retires on November 30, 2026.
  • Use Microsoft Learn to confirm a detail, not to learn a topic. The clock keeps running.
Pearson VUE for Microsoft

Exam duration and experience

Advice from exam takers