Microsoft · MS-102
Validates ability to deploy and manage Microsoft 365 tenants, implement identity and access with Microsoft Entra ID, manage security and threats using Microsoft 365 Defender, and manage compliance using Microsoft Purview.
Practice Questions
965
≈ 19 practice exams
Duration
120 minutes
Passing Score
700/1000
Difficulty
ExpertLast Updated
Jan 2025
Use this MS-102 practice exam to prepare for Microsoft 365 Certified: Administrator Expert (MS-102) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 965 questions for Microsoft MS-102, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Deploy and manage a Microsoft 365 tenant, Implement and manage Microsoft Entra identity and access, Manage security and threats by using Microsoft 365 Defender, and Manage compliance by using Microsoft Purview. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The MS-102 exam certifies Microsoft 365 Administrators who deploy and manage Microsoft 365 tenants across cloud and hybrid environments. It validates mastery across four critical pillars: tenant configuration and management, identity and access management via Microsoft Entra ID, threat protection through Microsoft Defender XDR, and compliance governance through Microsoft Purview. Passing this exam earns the Microsoft 365 Certified: Administrator Expert credential — the highest-level Microsoft 365 administration certification available.
The exam was last updated on November 10, 2025, and reflects current platform capabilities including Microsoft Entra Cloud Sync, Microsoft Defender Vulnerability Management, Defender for Cloud Apps, and Purview data lifecycle management. Candidates are assessed on practical, scenario-based tasks such as configuring Conditional Access policies, implementing directory synchronization using Microsoft Entra Connect Sync, managing attack simulation training, configuring DLP policies across Exchange, SharePoint, OneDrive, and Teams, and monitoring tenant health and adoption metrics through the Microsoft 365 admin center.
This certification targets experienced IT professionals already working as Microsoft 365 administrators who serve as the integrating hub across all Microsoft 365 workloads. Ideal candidates coordinate with architects and workload-specific administrators responsible for infrastructure, identity, security, compliance, endpoints, and applications in enterprise environments.
Typical job titles pursuing this certification include Microsoft 365 Administrator, Cloud Administrator, Identity and Access Administrator, and IT Manager overseeing Microsoft cloud services. Candidates are expected to have hands-on administration experience with at least one Microsoft 365 workload — such as Exchange Online, Teams, SharePoint, or Endpoint Management — and functional familiarity with all workloads. Working knowledge of networking fundamentals, Active Directory Domain Services, DNS, and PowerShell scripting is also expected.
To earn the Microsoft 365 Certified: Administrator Expert credential, candidates must first hold at least one qualifying Microsoft associate-level certification. Accepted prerequisites include: Microsoft 365 Certified: Endpoint Administrator Associate, Microsoft 365 Certified: Messaging Administrator Associate, Microsoft 365 Certified: Teams Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, or Microsoft Certified: Information Protection and Compliance Administrator Associate. At least one of these must be obtained before the expert certification can be awarded upon passing MS-102.
Beyond formal certification prerequisites, candidates should have practical experience administering Microsoft 365 and Microsoft Entra ID in production or lab environments. Recommended technical knowledge includes hybrid identity synchronization (Microsoft Entra Connect Sync or Cloud Sync), PowerShell-based administration, Microsoft Defender security tools, and Microsoft Purview compliance solutions. Familiarity with DNS configuration, Active Directory, and enterprise networking concepts is strongly advised.
MS-102 is a proctored exam delivered through Pearson VUE, available both online and at authorized testing centers. The exam has a time limit of 120 minutes and requires a passing score of 700 on a scale of 100–1000. Question count typically ranges from 40–60 items, though the exact number varies per exam form. Question types include scenario-based multiple-choice (single and multiple answer), drag-and-drop, build-list/reorder, and active screen (lab simulations may appear).
The exam is available in English, Chinese (Simplified), German, Spanish, French, Japanese, and Portuguese (Brazil). Candidates taking a non-English version may receive 30 additional minutes. The certification is valid for one year and can be renewed annually at no cost by passing a free, unproctored online renewal assessment on Microsoft Learn. Microsoft's standard retake policy applies: 24-hour wait after the first failed attempt, 14-day wait for subsequent attempts, with a maximum of five attempts per exam in any 12-month period.
The Microsoft 365 Certified: Administrator Expert credential directly validates enterprise-level cloud administration skills sought by organizations deeply invested in the Microsoft 365 ecosystem. Common roles held by certified professionals include Microsoft 365 Administrator, Cloud Infrastructure Administrator, Identity and Access Administrator, Security & Compliance Administrator, and IT Manager overseeing Microsoft cloud environments. The certification is also a recognized prerequisite stepping stone toward advanced Microsoft security certifications such as SC-100 (Cybersecurity Architect Expert) and SC-200 (Security Operations Analyst Associate).
According to ZipRecruiter data, Microsoft 365 Certified Enterprise Administrator Experts in the United States earn an average of approximately $100,000 annually, with top earners exceeding $130,000 and contractors billing $50–$120 per hour depending on scope and region. The certification is particularly valued at Microsoft Partner organizations, consulting firms, and large enterprises running hybrid Microsoft 365 and on-premises Active Directory environments. With Microsoft 365 remaining the dominant cloud productivity platform globally, demand for credentialed administrators remains consistently high across North America, Europe, and Asia-Pacific markets.
5 sample questions with answers and explanations. The full bank has 965 questions, enough for 19 full-length practice exams.
Preview — answers shown1. You work as a Microsoft 365 Administrator for Contoso Ltd. An item is subject to a retention policy that deletes after 5 years and a retention label that retains for 7 years. What happens to the item?
Explanation
Retention takes precedence over deletion, and the longest retention period wins, so the item is retained for 7 years and then deleted. Deletion at 5 years is overridden, it doesn't retain forever, and the label isn't ignored.
2. You work for Fourth Coffee, a Microsoft 365 organization. To enhance protection against zero-day malware in attachments, you want to enable a feature that rewrites URLs in emails to track clicks. Which Microsoft Defender for Office 365 component provides this capability?
Explanation
Safe Links rewrites URLs to include unique identifiers for tracking and protection against malicious links, including zero-day threats. Exchange Online Protection offers basic filtering but not URL rewriting. Safe Attachments focuses on file scanning. Outbound spam filtering manages outgoing spam limits.
3. You work as a Systems Administrator for Fabrikam Corp. The company has a Microsoft 365 tenant and needs to add a custom domain for email. You are verifying domain ownership. Which method can be used to verify a custom domain in Microsoft 365? (Select two!)
Multiple correct answersExplanation
Verifying domain ownership in Microsoft 365 can be done by adding a TXT record to DNS or uploading a verification file to the website, as these prove control over the domain. Creating VMs is unrelated to domain verification, firewall modifications pertain to security not verification, VPN tunnels handle access not ownership, and licenses require verification first.
4. You are the Microsoft 365 Administrator for Litware Inc., which has a Microsoft 365 E3 subscription. Litware is adding litwarecorp.com as a custom domain. The company plans to use subdomains like sales.litwarecorp.com under the root domain. You need to ensure the order of adding domains is correct. What should you do first?
Explanation
Root domains must be added before subdomains in Microsoft 365. Adding the subdomain first would fail, and the limit of 900 domains doesn't affect order. SPF records are configured after domain addition.
5. At Fabrikam, a consulting firm with multiple departments, you need to centralize user authentication and resource management across the organization. The company has grown from peer-to-peer networking to a structured environment with servers managing user accounts. Which service should you configure to store user accounts and enable replication between servers?
Explanation
Active Directory Domain Services stores user accounts in a database on domain controllers and replicates changes for centralized management. DNS handles name resolution but not user authentication storage. Azure AD is for cloud environments and doesn't replace on-premises ADDS. Group Policy Objects manage settings but require ADDS for deployment.
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
SC-900 · 230 questions
Microsoft Certified: Security Operations Analyst Associate (SC-200)
SC-200 · 599 questions
Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-802)
AZ-802 · 600 questions
Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900)
AB-900 · 700 questions
Microsoft 365 Certified: Fundamentals (MS-900)
MS-900 · 1201 questions
Administering Information Security in Microsoft 365 (SC-401)
SC-401 · 939 questions
$17.99
One-time access to this exam