Microsoft · MS-102
Validates ability to deploy and manage Microsoft 365 tenants, implement identity and access with Microsoft Entra ID, manage security and threats using Microsoft 365 Defender, and manage compliance using Microsoft Purview.
Practice Questions
965
≈ 19 practice exams
Duration
120 minutes
Passing Score
700/1000
Difficulty
ExpertLast Updated
Sep 2026
Microsoft is retiring exam MS-102 and the Microsoft 365 Certified: Administrator Expert credential on November 30, 2026, at 11:59 PM Central Standard Time — after that date neither can be earned nor renewed, and Microsoft has already opened a beta for the successor, AB-650 (Administering Microsoft 365 and AI Services), a single associate-level exam that folds in Copilot and AI-service governance and drops MS-102's prerequisite-certification requirement entirely. If you're reading this before the deadline, MS-102 is still live and still the faster, cheaper path to an expert-level Microsoft 365 credential. The exam's April 28, 2026 skills outline weights four domains: Deploy and manage a Microsoft 365 tenant at 25-30%, Implement and manage Microsoft Entra identity and access at 25-30%, Manage security and threats by using Microsoft Defender XDR at 30-35% (the single largest domain), and Manage compliance by using Microsoft Purview at 10-15%. This 965-question bank mirrors that split, weighting Defender XDR — Defender for Office 365 threat policies, Defender for Endpoint onboarding, Defender for Cloud Apps connectors, and Security Exposure Management — as heavily as Microsoft does, instead of treating it as an afterthought behind the more familiar tenant-admin material.
MS-102 runs 120 minutes and typically presents 40-60 questions — multiple-choice (single and multiple answer), drag-and-drop, build-list ordering, and scenario case studies — delivered through Pearson VUE at a test center or via OnVUE online proctoring. You need a scaled score of 700 out of 1,000 to pass; Microsoft doesn't publish a raw-to-scaled conversion, so treat every domain as scored rather than banking on your strongest area. The exam is available in English, Chinese (Simplified), German, Spanish, French, Japanese, and Portuguese (Brazil); non-English sittings get 30 extra minutes, and localized versions typically update about eight weeks after the English version. Candidates repeatedly flag two friction points: long scenario stems that eat pacing time if you over-read them, and product overlap — a question can hinge on knowing whether a setting lives in the Microsoft 365 admin center, the Entra admin center, the Defender portal, or the Purview portal rather than on the underlying concept. Exchange Online migration questions (cutover vs. staged) and Entra Privileged Identity Management role activation are two scenario types candidates report as trickier than the study guide's bullet points suggest. A failed attempt means a 24-hour wait before retrying, then 14 days for later attempts, capped at five tries per rolling 12 months.
Passing MS-102 alone doesn't earn the Administrator Expert credential — Microsoft also requires at least one prerequisite associate certification, and that list changed with the April 2026 revision. You now need one of: Microsoft 365 Certified: Endpoint Administrator Associate, Microsoft 365 Certified: Teams Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, or the newer Microsoft Certified: Information Security Administrator Associate — which replaced the older Messaging Administrator Associate and Information Protection and Compliance Administrator Associate options, so double-check which associate certs you currently hold before you sit MS-102. Exam pricing is set per country rather than published as a flat global rate, but the commonly reported U.S. price is around $165; confirm your exact price at registration through Pearson VUE. Once earned, the certification is valid for one year and renews free via a short online assessment on Microsoft Learn, though renewal itself disappears after the November 30, 2026 retirement date. Certified holders average roughly $100,000 a year in the U.S. (ZipRecruiter, 2026), with top earners past $130,000. Start with the 30 free questions, then work the full 965-question bank until your accuracy holds steady across all four domains — before the clock runs out.
MS-102 certifies Microsoft 365 Administrators who deploy and manage tenants across cloud and hybrid environments — but the exam and its expert credential are now sunsetting. Microsoft will retire MS-102 and the Microsoft 365 Certified: Administrator Expert certification on November 30, 2026, at 11:59 PM Central Standard Time; after that date neither can be earned nor renewed. Microsoft has already opened a beta for the successor, AB-650 (Administering Microsoft 365 and AI Services), a single associate-level exam leading to the Microsoft 365 Certified: AI Services Administrator Associate credential, which folds in Copilot and AI-service governance and drops MS-102's prerequisite-certification requirement entirely.
The current skills outline, revised April 28, 2026, tests four pillars: tenant deployment and management, Microsoft Entra identity and access, Microsoft Defender XDR threat protection, and Microsoft Purview compliance. Defender XDR is now the single heaviest domain at 30-35%, reflecting Microsoft's push to consolidate security operations into one portal. Candidates are assessed on practical, scenario-based tasks: configuring Conditional Access policies, running Microsoft Entra Connect Sync or Cloud Sync, managing Defender for Office 365 threat policies and attack simulation training, configuring DLP across Exchange Online, SharePoint, OneDrive, Teams, Power BI, and Microsoft 365 Copilot, and monitoring tenant health and adoption metrics through the Microsoft 365 admin center.
This certification targets experienced IT professionals already working as Microsoft 365 administrators who serve as the integrating hub across all Microsoft 365 workloads, coordinating with architects and workload-specific administrators responsible for infrastructure, identity, security, compliance, endpoints, and applications. Typical job titles include Microsoft 365 Administrator, Cloud Administrator, Identity and Access Administrator, and IT Manager overseeing Microsoft cloud services.
Candidates are expected to have hands-on administration experience with at least one Microsoft 365 workload — Exchange Online, Teams, SharePoint, or Endpoint Management — plus functional familiarity with all workloads and Microsoft Entra ID. Working knowledge of networking fundamentals, Active Directory Domain Services, DNS, and PowerShell scripting is also expected. Because the credential retires November 30, 2026, this exam now suits candidates who already hold a qualifying associate certification and want the expert credential quickly, rather than those starting a multi-year Microsoft 365 admin career path from scratch.
To earn the Microsoft 365 Certified: Administrator Expert credential, candidates must first hold at least one qualifying Microsoft associate-level certification. As of the April 2026 revision, the accepted prerequisites are: Microsoft 365 Certified: Endpoint Administrator Associate, Microsoft 365 Certified: Teams Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, or Microsoft Certified: Information Security Administrator Associate. This list replaced the previous set, which also accepted Microsoft 365 Certified: Messaging Administrator Associate and Microsoft Certified: Information Protection and Compliance Administrator Associate — candidates who hold either of those older prerequisites should verify their eligibility path on Microsoft Learn before scheduling MS-102.
MS-102 is a proctored exam delivered through Pearson VUE, available both online (OnVUE) and at authorized testing centers. The exam runs 120 minutes and requires a scaled passing score of 700 on a 100-1,000 scale. Question count typically ranges from 40-60 items and mixes scenario-based multiple-choice (single and multiple answer), drag-and-drop, build-list/reorder, and scenario case-study formats.
The exam is available in English, Chinese (Simplified), German, Spanish, French, Japanese, and Portuguese (Brazil); candidates testing in a non-English language receive 30 additional minutes, and localized versions update roughly eight weeks after the English version. Once earned, the certification is valid for one year and renews free through a short online assessment on Microsoft Learn — though this option ends when the exam retires on November 30, 2026. Microsoft's standard retake policy applies: a 24-hour wait after a first failed attempt, 14 days for subsequent attempts, and a cap of five attempts per rolling 12-month period.
The Microsoft 365 Certified: Administrator Expert credential validates enterprise-level cloud administration skills sought by organizations invested in the Microsoft 365 ecosystem. Common roles held by certified professionals include Microsoft 365 Administrator, Cloud Infrastructure Administrator, Identity and Access Administrator, Security & Compliance Administrator, and IT Manager overseeing Microsoft cloud environments. It's also a recognized stepping stone toward advanced Microsoft security certifications such as SC-100 (Cybersecurity Architect Expert) and SC-200 (Security Operations Analyst Associate).
Per ZipRecruiter data (2026), Microsoft 365 Certified Enterprise Administrator Experts in the United States average about $100,014 a year ($48.08/hour), with the middle range running $78,000 to $114,000 and top earners past $131,000; contractors often bill $50-$120 per hour depending on scope. The broader Microsoft 365 Administrator role (certified or not) averages $88,927 a year as of September 2026. Because MS-102 retires November 30, 2026, earning it now still gets you the expert-level credential and salary signal on your resume permanently — the certification itself doesn't disappear once earned, only the ability to earn or renew it after that date.
5 sample questions with answers and explanations. The full bank has 965 questions, enough for 19 full-length practice exams.
Preview — answers shown1. At Contoso Ltd., you need to add multiple domains to Microsoft 365. What's the maximum number of domains supported?
Explanation
Microsoft 365 supports up to 900 domains. 100 domains is too low for large organizations. 500 domains is under the limit. There is no unlimited support.
2. You work for Northwind Traders. After deleting a Microsoft 365 group, how long do you have to restore it before permanent deletion?
Explanation
Microsoft 365 groups can be restored within 30 days of deletion. Shorter periods apply to some actions, but 30 days is standard for full restoration.
3. You are a Microsoft 365 Administrator for Alpine Ski House, reviewing alerts in the Microsoft 365 Defender Portal. How long are alerts retained?
Explanation
Alerts in the Microsoft 365 Defender Portal are retained for 6 months, allowing time for investigation. Shorter periods like 30 days or 60 days don't provide sufficient retention, and 3 months is less than the actual duration.
4. You work for Litware Corp., with both on-premises AD and Azure AD. To manage devices and settings cloud-based, replacing GPOs, what service should you use?
Explanation
Intune manages devices and settings across platforms, serving as a cloud replacement for GPOs. Hyper-V is for virtualization. Kerberos is an authentication protocol. DNS resolves names.
5. City Power & Light has Microsoft 365 E5. Compare Safe Links to Microsoft recommendations. Tool?
Explanation
Configuration Analyzer compares settings to recommendations. Purview for compliance. Identity Protection for risks. Secure Score provides overall score.
MS-102 and the Microsoft 365 Certified: Administrator Expert certification retire on November 30, 2026, at 11:59 PM Central Standard Time. Microsoft has opened a beta for the successor, exam AB-650 (Administering Microsoft 365 and AI Services), which leads to the Microsoft 365 Certified: AI Services Administrator Associate credential. AB-650 is a single associate-level exam and does not require a prerequisite certification, unlike MS-102.
120 minutes, typically 40-60 questions mixing multiple-choice, drag-and-drop, and build-list/reorder formats, plus occasional scenario case studies. Non-English sittings receive an extra 30 minutes.
700 on a scale of 100 to 1,000. Microsoft doesn't publish how raw answers convert to that scaled score, so every domain counts — there's no way to bank points in one area to cover a weak one elsewhere.
At least one of four associate certifications, per the April 2026 revision: Microsoft 365 Certified: Endpoint Administrator Associate, Teams Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, or Information Security Administrator Associate. The older Messaging Administrator Associate and Information Protection and Compliance Administrator Associate paths were removed from the accepted list.
Per the April 28, 2026 skills outline: Deploy and manage a Microsoft 365 tenant 25-30%, Implement and manage Microsoft Entra identity and access 25-30%, Manage security and threats using Microsoft Defender XDR 30-35%, and Manage compliance using Microsoft Purview 10-15%. Defender XDR is the single largest domain.
Microsoft prices exams per country rather than publishing one global rate. The commonly reported U.S. price is around $165. Confirm the exact current price for your region when you register through Pearson VUE.
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
SC-900 · 230 questions
Microsoft Certified: Security Operations Analyst Associate (SC-200)
SC-200 · 599 questions
Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-802)
AZ-802 · 600 questions
Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900)
AB-900 · 700 questions
Microsoft 365 Certified: Fundamentals (MS-900)
MS-900 · 1201 questions
Administering Information Security in Microsoft 365 (SC-401)
SC-401 · 939 questions
$17.99
One-time access to this exam