I. Overview

This course covers three central elements of Microsoft 365 enterprise administration – Microsoft 365 security management, Microsoft 365 compliance management, and Microsoft 365 device management. In Microsoft 365 security management, you will examine all the common types of threat vectors and data breaches facing organizations today, and you will learn how Microsoft 365’s security solutions address these security threats. You will be introduced to the Microsoft Secure Score, as well as to Azure Active Directory Identity Protection. You will then learn how to manage the Microsoft 365 security services, including Exchange Online Protection, Advanced Threat Protection, Safe Attachments, and Safe Links. Finally, you will be introduced to the various reports that monitor your security health. You will then transition from security services to threat intelligence; specifically, using the Security Dashboard and Advanced Threat Analytics to stay ahead of potential security breaches.

With your Microsoft 365 security components now firmly in place, you will examine the key components of Microsoft 365 compliance management. This begins with an overview of all key aspects of data governance, including data archiving and retention, Information Rights Management, Secure Multipurpose Internet Mail Extension (S/MIME), Office 365 message encryption, and data loss prevention (DLP). You will then delve deeper into archiving and retention, paying particular attention to in-place records management in SharePoint, archiving and retention in Exchange, and Retention policies in the Security and Compliance Center. Now that you understand the key aspects of data governance, you will examine how to implement them, including the building of ethical walls in Exchange Online, creating DLP policies from built-in templates, creating custom DLP policies, creating DLP policies to protect documents, and creating policy tips. You will then focus on managing data governance in Microsoft 365, including managing retention in email, troubleshooting retention policies and policy tips that fail, as well as troubleshooting sensitive data. You will then learn how to implement Azure Information Protection and Windows Information Protection. You will conclude this section by learning how to manage search and investigation, including searching for content in the Security and Compliance Center, auditing log investigations, and managing advanced eDiscovery.

The course concludes with an in-depth examination of Microsoft 365 device management. You will begin by planning for various aspects of device management, including preparing your Windows 10 devices for co-management. You will learn how to transition from Configuration Manager to Intune, and you will be introduced to the Microsoft Store for Business and Mobile Application Management. At this point, you will transition from planning to implementing device management; specifically, your Windows 10 deployment strategy. This includes learning how to implement Windows Autopilot, Windows Analytics, and Mobile Device Management (MDM). When examining MDM, you will learn how to deploy it, how to enroll devices to MDM, and how to manage device compliance..

II. Duration

05 days

III. Objectives

• Microsoft 365 Security Metrics
• Microsoft 365 Security Services
• Microsoft 365 Threat Intelligence
• Data Governance in Microsoft 365
• Data Governance in Microsoft 365 Intelligence
• Search and Investigations
• Device Management
• Windows 10 Deployment Strategies
• Mobile Device Management

IV. Intended Audience

This course is designed for persons who are aspiring to the Microsoft 365 Enterprise Admin role and have completed one of the Microsoft 365 role-based administrator certification paths

Job role: Administrator

Preparation for exam: MS-101

Features: none

V. Prerequisites

Before attending this course, students must have:

• Completed a role-based administrator course such as Messaging, Teamwork, Security and Compliance, or Collaboration.
• A proficient understanding of DNS and basic functional experience with Microsoft 365 services.
• A proficient understanding of general IT practices.

VI. Course Outline

Module 1: Explore security metrics in Microsoft 365

In this learning path, you will examine all the common types of threat vectors and data breaches facing organizations today, and you will learn how Microsoft 365’s security solutions address these security threats, including the Zero Trust approach. You will be introduced to the Microsoft Secure Score, Privileged Identity Management, as well as to Azure Identity Protection and Microsoft Defender for Office 365.

Lessons

• Examine threat vectors and data breaches
• Explore the Zero Trust security model
• Explore security solutions in Microsoft 365
• Examine Microsoft Secure Score
• Examine Privileged Identity Management
• Examine Azure Identity Protection

Module 2: Manage Your Microsoft 365 Security Services

This learning path examines how to manage the Microsoft 365 security services, including Exchange Online Protection, Microsoft Defender for Office 365, Safe Attachments, and Safe Links. You will also be introduced to the various reports that help an organization monitor its security health.

Lessons

• Examine Exchange Online Protection
• Examine Microsoft Defender for Office 365
• Manage Safe Attachments
• Manage Safe Links
• Explore reporting in the Microsoft 365 security services

Lab: Manage Microsoft 365 Security Services

• Implement a Safe Attachments policy
• Implement a Safe Links policy

Module 3:  Implement threat intelligence in Microsoft 365

In this learning path, you will then transition from security services to threat intelligence; specifically, using the Security Dashboard, Microsoft Defender for Identity, and Microsoft Cloud Application Security to stay ahead of potential security breaches.

Lessons

• Explore threat intelligence in Microsoft 365
• Explore the Security Dashboard
• Implement Microsoft Defender for Identity
• Implement Microsoft Cloud Application Security

Lab: Implement Threat Intelligence

• Conduct a Spear Phishing attack using the Attack Simulator
• Conduct Password attacks using the Attack Simulator
• Prepare for Alert Policies
• Implement a Mailbox Permission Alert
• Implement a SharePoint Permission Alert
• Test the Default eDiscovery Alert

Module 4: Introduction to Data Governance in Microsoft 365

This learning path examines the key components of Microsoft 365 Compliance management. This begins with an overview of all key aspects of data governance, including data archiving and retention, Information Rights Management, Office 365 message encryption, In-place Records Management in SharePoint, and data loss prevention (DLP).

Lessons

• Explore archiving in Microsoft 365
• Explore retention in Microsoft 365
• Explore Information Rights Management
• Explore Office 365 Message Encryption
• Explore In-place Records Management in SharePoint
• Explore Data Loss Prevention in Microsoft 365

Lab: Implement Data Governance

• Configure Microsoft 365 Message Encryption
• Validate Information Rights Management
• Initialize Compliance
• Configure Retention Tags and Policies

Module 5: Implement data governance in Microsoft 365

This learning path examines how to implement the key aspects of data governance, including the building of information barriers in Microsoft 365 and ethical walls in Exchange Online, creating DLP policies from built-in templates, creating custom DLP policies, creating DLP policies to protect documents, and creating policy tips.

Lessons

• Evaluate your compliance readiness
• Implement compliance solutions
• Create information barriers in Microsoft 365
• Create a DLP policy from a built-in template
• Create a custom DLP policy
• Create a DLP policy to protect documents
• Implement policy tips for DLP policies

Lab: Implement DLP Policies

• Manage DLP Policies
• Test MRM and DLP Policies

Module 6: Manage data governance in Microsoft 365

This learning path focuses on managing data governance in Microsoft 365, including managing retention in email, troubleshooting retention policies and policy tips that fail, as well as troubleshooting sensitive data. You will then learn how to implement sensitivity labels and Windows Information Protection.

Lessons

• Manage retention in email
• Troubleshoot data governance
• Explore sensitivity labels
• Implement sensitivity labels
• Implement Data Governance