MS-102 Microsoft 365 Administrator Certification Exam Guide: Format, Objectives, and Study Plan

• Confirm that MS-102 matches the role being targeted before starting exam preparation.
• Use the current Microsoft Skills measured outline as the source of truth for objectives.
• Practise in a safe Microsoft 365 tenant rather than memorising admin centre screens.
• Balance Microsoft 365 admin centre work with Microsoft Graph PowerShell, Exchange Online PowerShell, and scenario review.

The MS-102 exam validates Microsoft 365 Administrator skills across tenant administration, Microsoft Entra ID identity and access, Microsoft Defender security operations, and Microsoft Purview compliance administration. It is designed for administrators who already understand Microsoft 365 workloads and now need to demonstrate that they can manage the tenant as an integrated platform rather than as separate tools.

The exam rewards practical judgement. A candidate may understand where a setting lives in the Microsoft 365 admin centre, but still struggle if they have not practised how licensing affects a feature, how Conditional Access policies interact with device state and risk, or how retention labels differ from retention policies. That is why an effective MS-102 plan should combine objective review, hands-on tenant work, PowerShell practice, and exam-style scenario thinking.

Who MS-102 is for

MS-102 fits professionals who administer Microsoft 365 across identity, collaboration, security, and compliance. Typical candidates include Microsoft 365 administrators, systems administrators moving into cloud administration, identity engineers who need broader tenant responsibility, and endpoint or messaging administrators expanding beyond a single workload.

It is worth checking whether MS-102 is the right next step before committing study time. MS-102 validates broad Microsoft 365 administration across the tenant, identity, security, compliance, and collaboration boundaries. By contrast, SC-300 is a better match for candidates whose work is primarily Microsoft Entra ID identity and access, while MD-102 is more focused on endpoint administration; readers on that endpoint path may find the Microsoft 365 Certified Endpoint Administrator MD-102 course more aligned with their day-to-day role.

MS-102 exam at a glance

Microsoft can update exam details, item types, and scheduling information, so the Microsoft Learn exam page should be treated as the source of record at the point of booking. The table below summarises the practical details candidates should verify before scheduling.

The most important practical point is that Microsoft certification exams are maintained products. Skills measured documents are refreshed when Microsoft changes services, terminology, and role expectations. Candidates should review the change log on the official exam page close to the exam date, especially if they have been studying from older material that still uses Azure AD terminology without explaining the Microsoft Entra ID rename.

Skills measured in MS-102

The MS-102 objectives below reflect the current structure candidates should check against Microsoft’s published Skills measured document before the exam. Last updated for this guide: June 2026. Because Microsoft can revise objectives, section names, and weights, candidates should download the latest Skills measured PDF from Microsoft Learn shortly before sitting the exam.

The objective headings tell only part of the story. MS-102 often tests whether a candidate understands how settings interact across products. For example, a Conditional Access question may require knowledge of user risk, sign-in risk, device compliance, authentication strength, exclusions, and emergency access accounts. A compliance question may ask for the right control when the business need is retention, classification, encryption, or prevention of data sharing.

Tenant management foundations

Tenant administration is the base layer of MS-102. Candidates should understand how domains, organisational settings, licences, users, groups, administrative roles, and service health fit together. This is less about memorising every page in the Microsoft 365 admin centre and more about knowing where responsibility belongs when something has to be configured, delegated, monitored, or troubleshot.

Licensing deserves particular attention because it affects what can be configured in the first place. Many features associated with Microsoft Entra ID, Microsoft Defender, and Microsoft Purview depend on the plans assigned to users or included in the tenant. A common preparation mistake is to learn a feature in isolation and then miss that an exam scenario is asking whether the required licence is available, whether the user is in scope, or whether the feature is enabled at the tenant level.

Administrators should also be comfortable with role-based access. MS-102 scenarios often require the least-privileged role that can perform a task, not simply the broadest administrator role. Practising with role assignments, administrative units, group ownership, and privileged access concepts helps candidates avoid over-permissioned answers.

Identity and access in Microsoft Entra ID

Microsoft Entra ID is central to the exam because identity decisions affect every other Microsoft 365 workload. Candidates should be able to manage users, groups, roles, authentication methods, Conditional Access policies, hybrid identity concepts, and identity protection signals. They should also recognise current terminology: Microsoft Entra ID is the product name that replaced Azure Active Directory, while older documentation, scripts, and study material may still contain the previous term.

Conditional Access is a frequent source of weak exam performance because it is easy to study as a checklist of controls rather than as a decision engine. A realistic scenario can involve named locations, app targeting, user risk, sign-in risk, device compliance, session controls, authentication strength, and exclusions for break-glass accounts. Candidates should practise reading the business requirement first, then deciding which condition and grant control solves it with the least disruption.

Hybrid identity also requires clear thinking. The exam can refer to synchronised identities, authentication options, password management, and the effect of identity design on Microsoft 365 access. Candidates do not need to become dedicated identity architects for MS-102, but they do need to understand how identity synchronisation and authentication choices affect administration, security, and user experience.

Security and threat management with Microsoft Defender

Microsoft Defender coverage in MS-102 is about administration and operational awareness. Candidates should understand how Microsoft Defender helps detect, investigate, and respond to threats across Microsoft 365 services. That includes incidents, alerts, email and collaboration protection, endpoint-related visibility, secure score concepts, and the relationship between policies, users, devices, and workloads.

From a practical perspective, the exam often favours candidates who can connect signals to actions. A phishing scenario may point to anti-phishing policies, safe attachments, safe links, user reporting, investigation, or remediation. A device-related scenario may involve endpoint protection signals, device compliance, Conditional Access, or exposure management. The strongest preparation is to practise walking from alert to investigation to policy adjustment, rather than studying Defender features as isolated menu items.

Microsoft Defender questions may also include administrative boundaries. Candidates should know which portal or admin role is relevant, what reports or alerts would be reviewed, and how changes affect users. This makes hands-on navigation useful, but it should be paired with scenario reasoning so that the candidate understands why a particular control is appropriate.

Compliance administration with Microsoft Purview

Microsoft Purview can be challenging because several controls sound similar until they are applied to a business requirement. Data loss prevention policies help prevent sensitive information from being shared in inappropriate ways. Sensitivity labels classify and protect information. Retention labels and retention policies manage how long content is kept or deleted. eDiscovery and audit capabilities support investigation and legal or regulatory processes.

The exam may ask for the control that best fits a requirement such as preventing credit card information from leaving the organisation, retaining finance records for a defined period, encrypting confidential documents, or locating information for an investigation. Candidates should practise mapping each requirement to the right Purview capability. That mapping is usually more important than memorising every configuration field.

Permissions also matter in Purview. Compliance tasks are often assigned to specialist roles rather than global administrators, and some tasks require role group membership before features are visible. Candidates should practise assigning the right compliance role group and then confirming what the administrator can see and do.

Building a safe hands-on lab

A safe lab is one of the most useful investments for MS-102 preparation. A Microsoft 365 Developer Program tenant, when available and appropriate for the candidate’s circumstances, can provide a sandbox for practising administration without risking a production environment. Candidates should avoid using personal or employer production tenants for experiments unless there is explicit approval and a rollback plan.

The lab should include the workloads that appear throughout the exam: Exchange Online for mail flow and protection concepts, SharePoint and OneDrive for information protection and sharing, Teams for collaboration governance, Microsoft Entra ID for identity and access, Microsoft Defender for threat protection concepts, and Microsoft Purview for compliance tasks. The goal is not to build a large environment; it is to create enough users, groups, policies, and sample data to understand cause and effect.

Good lab practice also means documenting each change. Candidates should record what they configured, which user or group was in scope, which licence was assigned, what result was expected, and what happened after sign-in or policy evaluation. This habit mirrors the thinking needed in exam case studies, where the answer depends on interpreting requirements, constraints, and existing configuration.

PowerShell practice for MS-102

PowerShell remains important for Microsoft 365 administrators, but candidates should avoid building their study plan around legacy modules alone. Modern administration increasingly uses Microsoft Graph PowerShell for Microsoft Entra ID and Microsoft 365 resources, ExchangeOnlineManagement for Exchange Online, and the Microsoft Teams PowerShell module for Teams administration. Older MSOnline and AzureAD module examples may still appear in blogs and scripts, but they should not be treated as the preferred path for new preparation.

Practical PowerShell preparation should focus on authentication patterns, connecting to services, reading configuration, making controlled changes, and confirming results. Candidates should be comfortable with commands such as connecting to Microsoft Graph with appropriate scopes, reviewing users and groups, managing Exchange Online recipients, checking mailbox settings, and retrieving policy information. The purpose is not to memorise every cmdlet, but to understand how scripted administration supports repeatable and auditable operations.

A sensible study rhythm alternates between portal and shell. Configure a setting in the admin centre, inspect it with PowerShell where possible, then reverse the exercise by making a controlled PowerShell change and confirming it in the portal. This approach exposes gaps quickly and prevents the common mistake of recognising a screen without understanding the underlying object or policy.

A practical four-to-six-week study plan

A four-to-six-week plan works well for candidates who already have general Microsoft 365 experience and can study consistently around work. Candidates with limited tenant administration experience may need longer, especially if identity, security, or compliance are new areas. The plan should be adjusted around the official Skills measured document and the candidate’s weakest domains.

Candidates who prefer structured preparation can use a Microsoft 365 Administrator course as a framework, but the course should be paired with independent lab work and current Microsoft documentation. Readynez covers Microsoft technologies through Microsoft training courses, while candidates should still validate every MS-102 objective against the current Microsoft exam page before scheduling.

Registration, rescheduling, and exam-day setup

MS-102 registration starts from the Microsoft Learn exam page, where candidates sign in, select the exam, and continue to the scheduling provider. Pearson VUE is commonly used for Microsoft certification scheduling. The registration flow shows available delivery options, appointment times, local pricing, language options, and identification requirements.

For an online-proctored appointment, candidates should prepare the test environment before exam day. The room should be quiet, private, well lit, and free from notes, additional screens, phones, and unauthorised material. The computer should meet the provider’s system requirements, and the candidate should run the system test in advance rather than discovering problems during check-in.

Identification requirements should be checked carefully because the name on the exam profile must match the accepted ID. Candidates who need accessibility accommodations should request them through the official Microsoft and exam provider process before scheduling where required, rather than expecting changes to be made during check-in. Reschedule and cancellation windows are shown in the scheduling provider’s policy, and candidates should review those rules before booking.

Exam-day strategy

MS-102 questions can be dense because they often include business requirements, current configuration, constraints, and a proposed administrative action. Candidates should read for the requirement first, then identify the Microsoft 365 workload involved, the relevant licence or role constraint, and the least disruptive control that satisfies the scenario.

Case studies and longer scenarios deserve deliberate timeboxing. If a question is unclear after a reasonable attempt, flagging it and moving on is usually better than spending too long on one item. Microsoft exams can include unscored items used for evaluation, but candidates are not told which questions those are, so the safest approach is to answer every question that time allows while preserving enough time for review.

During the final review, candidates should look for answers that are too broad, over-permissioned, or based on old terminology. If two options look similar, the better answer often aligns more precisely with the requirement: DLP rather than retention, sensitivity labels rather than access reviews, Conditional Access rather than a user property change, or a workload-specific admin role rather than Global Administrator.

Common preparation mistakes to avoid

One recurring mistake is relying only on the graphical interface. The exam is not a PowerShell test in isolation, but Microsoft 365 administrators are expected to understand repeatable administration, bulk operations, and how configuration can be inspected outside the portal. Candidates should therefore practise both admin centre workflows and PowerShell-based verification.

Another common issue is weak licence-to-feature understanding. A candidate may know what a Defender or Purview feature does, but miss that a scenario depends on the plan available to the tenant or the licence assigned to the user. This becomes especially important when comparing features commonly associated with Microsoft 365 E3 and E5 capabilities.

Outdated terminology can also cause confusion. Study material that still says Azure AD is not automatically unusable, but candidates should translate it to Microsoft Entra ID and confirm whether the feature, portal location, or module has changed. The same caution applies to scripts based on MSOnline or AzureAD modules when Microsoft Graph PowerShell is now the more relevant direction for new administration work.

Where MS-102 preparation should lead

MS-102 preparation should leave a candidate better able to administer Microsoft 365 in production, not simply more familiar with exam wording. The strongest outcome is a working understanding of how tenant settings, identity controls, security tools, compliance policies, licences, and administrative roles influence each other.

A practical next step is to compare the official Skills measured document with recent hands-on work and mark every objective as confident, needs lab practice, or needs documentation review. Candidates planning several Microsoft certifications can also review Unlimited Microsoft Training as one way to structure a broader learning plan, or contact Readynez with questions about choosing a Microsoft certification path.

FAQ

What is the format of the Microsoft MS-102 exam?

MS-102 uses Microsoft certification exam formats that may include multiple-choice, multi-select, case studies, drag-and-drop, build-list, hot area, and scenario-based questions. The exact question mix can change, so candidates should prepare for applied scenarios rather than one fixed format.

What topics are covered in the Microsoft MS-102 exam?

The exam covers Microsoft 365 tenant administration, Microsoft Entra ID identity and access, security and threat management with Microsoft Defender, and compliance administration with Microsoft Purview. Candidates should use the current Microsoft Skills measured document for the authoritative objective list and weighting.

What are the prerequisites for taking the Microsoft MS-102 exam?

Candidates should already understand Microsoft 365 services, identity, security, compliance, and administration concepts. Microsoft certification requirements can change, so candidates should confirm the current credential relationship and prerequisite rules on the official Microsoft exam and certification pages.

How can I prepare effectively for the Microsoft MS-102 exam?

Effective preparation combines the official Skills measured document, hands-on practice in a safe Microsoft 365 tenant, admin centre configuration, PowerShell verification, scenario drills, and timed practice questions. Candidates should pay particular attention to licensing, Conditional Access, Defender workflows, and Purview feature selection.

How can I register for the Microsoft MS-102 exam?

Registration begins on the Microsoft Learn MS-102 exam page. After signing in, candidates continue to the scheduling provider, choose an online or test-centre appointment where available, review local pricing and ID requirements, and confirm the booking.

Can the MS-102 objectives change after studying has started?

Yes. Microsoft updates certification exams when products, role expectations, and terminology change. Candidates should check the exam page change log and download the latest Skills measured document during preparation and again shortly before the exam date.