Microsoft · MS-102
Validates ability to deploy and manage Microsoft 365 tenants, implement identity and access with Microsoft Entra ID, manage security and threats using Microsoft 365 Defender, and manage compliance using Microsoft Purview.
Practice Questions
965
≈ 19 practice exams
Duration
120 minutes
Passing Score
700/1000
Difficulty
ExpertLast Updated
Jan 2025
Use this MS-102 practice exam to prepare for Microsoft 365 Certified: Administrator Expert (MS-102) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 965 questions for Microsoft MS-102, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Deploy and manage a Microsoft 365 tenant, Implement and manage Microsoft Entra identity and access, Manage security and threats by using Microsoft 365 Defender, and Manage compliance by using Microsoft Purview. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The MS-102 exam certifies Microsoft 365 Administrators who deploy and manage Microsoft 365 tenants across cloud and hybrid environments. It validates mastery across four critical pillars: tenant configuration and management, identity and access management via Microsoft Entra ID, threat protection through Microsoft Defender XDR, and compliance governance through Microsoft Purview. Passing this exam earns the Microsoft 365 Certified: Administrator Expert credential — the highest-level Microsoft 365 administration certification available.
The exam was last updated on November 10, 2025, and reflects current platform capabilities including Microsoft Entra Cloud Sync, Microsoft Defender Vulnerability Management, Defender for Cloud Apps, and Purview data lifecycle management. Candidates are assessed on practical, scenario-based tasks such as configuring Conditional Access policies, implementing directory synchronization using Microsoft Entra Connect Sync, managing attack simulation training, configuring DLP policies across Exchange, SharePoint, OneDrive, and Teams, and monitoring tenant health and adoption metrics through the Microsoft 365 admin center.
This certification targets experienced IT professionals already working as Microsoft 365 administrators who serve as the integrating hub across all Microsoft 365 workloads. Ideal candidates coordinate with architects and workload-specific administrators responsible for infrastructure, identity, security, compliance, endpoints, and applications in enterprise environments.
Typical job titles pursuing this certification include Microsoft 365 Administrator, Cloud Administrator, Identity and Access Administrator, and IT Manager overseeing Microsoft cloud services. Candidates are expected to have hands-on administration experience with at least one Microsoft 365 workload — such as Exchange Online, Teams, SharePoint, or Endpoint Management — and functional familiarity with all workloads. Working knowledge of networking fundamentals, Active Directory Domain Services, DNS, and PowerShell scripting is also expected.
To earn the Microsoft 365 Certified: Administrator Expert credential, candidates must first hold at least one qualifying Microsoft associate-level certification. Accepted prerequisites include: Microsoft 365 Certified: Endpoint Administrator Associate, Microsoft 365 Certified: Messaging Administrator Associate, Microsoft 365 Certified: Teams Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, or Microsoft Certified: Information Protection and Compliance Administrator Associate. At least one of these must be obtained before the expert certification can be awarded upon passing MS-102.
Beyond formal certification prerequisites, candidates should have practical experience administering Microsoft 365 and Microsoft Entra ID in production or lab environments. Recommended technical knowledge includes hybrid identity synchronization (Microsoft Entra Connect Sync or Cloud Sync), PowerShell-based administration, Microsoft Defender security tools, and Microsoft Purview compliance solutions. Familiarity with DNS configuration, Active Directory, and enterprise networking concepts is strongly advised.
MS-102 is a proctored exam delivered through Pearson VUE, available both online and at authorized testing centers. The exam has a time limit of 120 minutes and requires a passing score of 700 on a scale of 100–1000. Question count typically ranges from 40–60 items, though the exact number varies per exam form. Question types include scenario-based multiple-choice (single and multiple answer), drag-and-drop, build-list/reorder, and active screen (lab simulations may appear).
The exam is available in English, Chinese (Simplified), German, Spanish, French, Japanese, and Portuguese (Brazil). Candidates taking a non-English version may receive 30 additional minutes. The certification is valid for one year and can be renewed annually at no cost by passing a free, unproctored online renewal assessment on Microsoft Learn. Microsoft's standard retake policy applies: 24-hour wait after the first failed attempt, 14-day wait for subsequent attempts, with a maximum of five attempts per exam in any 12-month period.
The Microsoft 365 Certified: Administrator Expert credential directly validates enterprise-level cloud administration skills sought by organizations deeply invested in the Microsoft 365 ecosystem. Common roles held by certified professionals include Microsoft 365 Administrator, Cloud Infrastructure Administrator, Identity and Access Administrator, Security & Compliance Administrator, and IT Manager overseeing Microsoft cloud environments. The certification is also a recognized prerequisite stepping stone toward advanced Microsoft security certifications such as SC-100 (Cybersecurity Architect Expert) and SC-200 (Security Operations Analyst Associate).
According to ZipRecruiter data, Microsoft 365 Certified Enterprise Administrator Experts in the United States earn an average of approximately $100,000 annually, with top earners exceeding $130,000 and contractors billing $50–$120 per hour depending on scope and region. The certification is particularly valued at Microsoft Partner organizations, consulting firms, and large enterprises running hybrid Microsoft 365 and on-premises Active Directory environments. With Microsoft 365 remaining the dominant cloud productivity platform globally, demand for credentialed administrators remains consistently high across North America, Europe, and Asia-Pacific markets.
5 sample questions with answers and explanations. The full bank has 965 questions, enough for 19 full-length practice exams.
Preview — answers shown1. You are deploying Microsoft 365 Apps for enterprise for A. Datum using the Office Deployment Tool from a local source. You need to create shared folders for installation files. Which of the following structures should you use?
Explanation
Creating a parent folder with child folders for pilot and broad groups organizes SEC and SECP files efficiently. One folder doesn't allow segregation, user-specific folders are impractical, and language-based folders don't match channel needs.
2. You are managing groups for Adatum to support different needs: collaboration with Teams, email distribution, and dynamic membership. Which group types should you use? (Select three!)
Multiple correct answersExplanation
Microsoft 365 group enables Teams collaboration, distribution group handles email distribution, and security group supports dynamic membership based on attributes. Mail-enabled security group has limited uses, dynamic device group is not standard, and assigned membership is a method not a type.
3. You work as a Microsoft 365 Administrator for Litware. The company uses Microsoft Defender for Cloud Apps for Cloud Discovery. You want to analyze traffic logs from firewalls and proxies to identify cloud app usage. Which tool dynamically discovers and analyzes cloud apps using traffic logs?
Explanation
Cloud Discovery uses traffic logs to dynamically discover and analyze cloud apps. App Connectors connect specific apps, Conditional Access App Control provides real-time control, and session policies manage user sessions.
4. You work as a Systems Administrator for Adventure Works, a retail company. Adventure Works is creating a DLP policy from a template. You need to assign permissions for users to create and manage DLP policies. Which role should you assign to compliance officers for full management access?
Explanation
The DLP Compliance Management role provides the necessary permissions to create and manage DLP policies. The global administrator role grants broader access than needed. The user administrator role is for user management, not DLP. The billing administrator role is unrelated to DLP.
5. You work for City Power & Light, a Microsoft 365 E5 organization, and need to submit a false positive email to Microsoft, which should result in an allow entry for the sender. What happens when you report it as Should not have been blocked on the Submissions page?
Explanation
Reporting a false positive on the Submissions page creates an allow entry for the sender in the Tenant Allow/Block List under domains and addresses. Spoof intelligence handles spoofed senders specifically. Trusted senders in anti-phishing policies are for impersonation. Quarantining permanently is not the outcome for false positives.
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
SC-900 · 230 questions
Microsoft Certified: Security Operations Analyst Associate (SC-200)
SC-200 · 599 questions
Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-802)
AZ-802 · 600 questions
Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900)
AB-900 · 700 questions
Microsoft 365 Certified: Fundamentals (MS-900)
MS-900 · 1201 questions
Administering Information Security in Microsoft 365 (SC-401)
SC-401 · 939 questions
$17.99
One-time access to this exam