MS-500 Microsoft 365 Security Administration Exam Study Guide

This summer, Microsoft announced changes to the MS-500 exam objectives. Below you’ll find the updated listing for June 2020 and beyond with links to relevant documentation. The best way to use this study guide is to find the topics you’re least familiar with and focus on those. In any remaining time, you can always review those you’re familiar with to make sure nothing has changed significantly.

As stated on the MS-500 exam page, potential candidates for the MS-500 exam implement, manage and monitor security and compliance solutions for Microsoft 365 and hybrid environments. Professionals familiar with the content of the exam are well-positioned to secure their Microsoft 365 environments by responding to threats, performing investigations, enforcing data governance, and collaborating with other enterprise professionals on security and compliance topics.

Register for the MS-500 exam

Skills measured

  • Implement and manage identity and access (30-35%)
  • Implement and manage threat protection (20-25%)
  • Implement and manage information protection (15-20%)
  • Manage governance and compliance features in Microsoft 365 (20-25%)

MS-500 Study Guides

Objectives with online documentation for study

Implement and manage identity and access (30-35%)

Secure Microsoft 365 hybrid environments

Secure Identities

Implement authentication methods

Implement conditional access

Implement role-based access control (RBAC)

Implement Azure AD Privileged Identity Management (PIM)

Implement Azure AD Identity Protection

Implement and manage threat protection (20-25%)

Implement an enterprise hybrid threat protection solution

Implement device threat protection

Implement and manage device and application protection

Implement and manage Office 365 ATP

Implement Azure Sentinel for Microsoft 365

Implement and manage information protection (15-20%)

Secure data access within Office 365

Manage Azure information Protection (AIP)

Manage Data Loss Prevention (DLP)

Implement and manage Microsoft Cloud App Security

Manage governance and compliance features in Microsoft 365 (25-30%)

Configure and analyze security reporting

Center

Center

Manage and analyze audit logs and reports

Manage data governance and retention

Manage search and investigation

Manage data privacy regulation compliance

MCSA: O365 certification & 70-346/70-347 exams retired; replaced by role-based M365: Enterprise Administrator Expert certification & MS-100/MS-101 exams

If you’ve been studying for 70-346 and 70-347 to get your MCSA, there’s no better time than right now to schedule those exams. As of March 31, 2019, they will both be retired. The exam page for each currently features the following notice.

“This exam retires on March 31, 2019. A replacement exam may be available. To learn more, visit our blog: https://www.microsoft.com/en-us/learning/community.aspx and review our Exam Retirement posts.”

New Exams

The retirement post last updated Dec 21, 2018, lists the two exams as follows, being replaced with role-based MS-100 and MS-101.

From https://www.microsoft.com/en-us/learning/microsoft-365-exams.aspx

Retired Certifications

Along with the 32 exams slated for retirement, they’re retiring a number of certifications as well, replaced with role-based certifications.

If you’ve already gotten your MCSA: O365, don’t worry – it’s still active after retired.

“This certification retires on March 31, 2019. You will no longer be able to earn this certification after this date. If you earn it prior to that date, it will remain in the Active Certifications section of your transcript after that date.”

From https://www.microsoft.com/en-us/learning/mcsa-office365-certification.aspx

What should I do now?

This info-graphic illustrates the various paths available:

What if I already have my MCSA?

  • Unfortunately, if you’ve already gotten your MCSA: Office 365, there is no transition exam. If you want to new certification you’ll need to start anew and take MS-100/MS-101 since the new certification is “expert” level as opposed to your current “associate” level.
  • You could also consider upgrading your MCSA to the existing MCSE: Productivity certification instead of pursuing the new M365 Expert certification

MCSA: Office 365 Study Guide for Exams 70-346 & 70-347

Note: The MCSA: O365 Certification and exams 70-346 & 70-347 are being retired March 31, 2019. Learn more about what to expect here.


Having just passed both 70-346 and 70-347, I know how hard it can be to find helpful and relevant resources to help you prepare for the exams. I’ve compiled resources below I used to help me prepare and I hope they help you with your own studying. I’ve included nothing more or less than I used myself. The most important piece for me was the Lynda.com courses – I wouldn’t have passed without them. Good luck!

Required Exams

(check links for most recent requirements)

Books

Videos

Courses

Lynda.com

(free access for card-holders at many libraries, or free trial month for new users)

edX

Courses are free on edX. Just create an account.

Pluralsight

Get a 10-day free trial

Prep Tips from Nate

70-346 Skills Measured

70-347 Skills Measured

These are taken directly from the exam info pages. Clicking a link will take you to the respective section of the page to see specific sub-topics covered under each skill section. I’ve also included the “Preparation resources” provided by Microsoft under each respective section:
Provision Office 365 (15–20%)Plan and implement networking and security in Office 365 (15–20%)

Manage cloud identities (15–20%)

Implement and Manage Identities by Using Azure AD Connect (15–20%)

Implement and manage federated identities for single sign-on (SSO) (15–20%)

Monitor and troubleshoot Office 365 availability and usage (15–20%)

Manage clients and end-user devices (20–25%)

Provision SharePoint Online site collections (20–25%)

Configure Exchange Online and Skype for Business Online for end users (20–25%)

Plan for Exchange Online and Skype for Business Online (20–25%)

Configure and secure Office 365 services (20–25%)