Microsoft 365 Mobility and Security - Exam Guide MS 101

Cover
Title Page
Copyright and Credits
Dedication
About Packt
Contributors
Table of Contents
Preface
Section 1: Modern Device Services
Chapter 1: Implementing Mobile Device Management (MDM)
	Planning for MDM
		Device types and enrollment
	Configuring MDM integration with Azure AD
		Registered versus joined devices
		Setting up automatic enrollment
	Setting an MDM authority
	Setting device enrollment limits for users
		Device type restrictions
		Device limit restrictions
	Summary
	Questions
	Further reading
Chapter 2: Managing Device Compliance
	Planning for device compliance
	Configuring device compliance policies
		Policy options
		Creating a compliance policy
	Designing, creating, and managing conditional access policies
		Designing conditional access policies
			Assignments
				Users and groups
				Cloud apps or actions
				Conditions
			Access controls
				Grant
				Session
		Creating conditional access policies
		Managing conditional access policies
	Summary
	Questions
	Further reading
Chapter 3: Planning for Devices and Apps
	Creating and configuring Microsoft Store for Business
		Creating your private store
		Setting your MDM solution in Microsoft Store
		Configuring synchronization in Intune and synchronizing apps
	Planning app deployment
		Using a management tool
		Making apps available via your private store
		Assigning apps directly to employees
	Planning device co-management
	Planning device monitoring
	Planning for device profiles
		Assigning profiles
		Monitoring profiles
		Policy conflicts
	Planning for MAM
	Planning mobile device security
	Summary
	Questions
	Further reading
Chapter 4: Planning Windows 10 Deployment
	Planning for WaaS
		Building and deploying
		Servicing
			Servicing channels
			Servicing tools
	Planning for Windows 10 Enterprise deployment
		Windows Autopilot
		In-place upgrades
	Analyzing Upgrade Readiness for Windows 10
	Additional Windows 10 Enterprise security features
	Summary
	Questions
	Further reading
Section 2: Microsoft 365 Security Threat Management
Chapter 5: Implementing Cloud App Security (CAS)
	Setting up CAS
		Integrating AIP with CAS
	Configuring CAS policies
		Policies
		Templates
	Configuring connected apps
	Designing a CAS solution
	Managing CAS alerts
	Uploading CAS traffic logs
		Manual uploads
		Automatic uploads
	Summary
	Questions
	Further reading
Chapter 6: Implementing Threat Management
	Planning a threat management solution
	Designing and configuring Azure ATP
		Setting up a sensor
	Designing and configuring Microsoft 365 ATP policies
		ATP Safe Attachments
		ATP Safe Links
		ATP for SharePoint, OneDrive, and Microsoft Teams
		ATP anti-phishing protection
	Monitoring ATA incidents
	Summary
	Questions
	Further reading
Chapter 7:  Implementing Windows Defender ATP
	Planning our Windows Defender ATP solution
	Configuring our preferences
		Secure score dashboard security controls
		Microsoft Threat Experts capabilities
	Implementing Windows Defender ATP policies
	Enabling and configuring the security features of Windows 10 Enterprise
		Attack surface reduction
			Install application guard 
			Enable application control
			Exploit protection
			Network protection
			Controlled folder access
			Network firewall
		Next-generation protection
	Summary
	Questions
	Further reading
Chapter 8: Managing Security Reports and Alerts
	Managing the Service Assurance Dashboard
		Accessing the Service Assurance Dashboard
		Compliance Manager
		Granting access to others
	Microsoft Secure Score and Azure AD Identity Secure Score
	Tracing and reporting on Azure AD Identity Protection
		Investigating risk events and vulnerabilities
		Settings and alerts
	Microsoft 365 security alerts
	Azure AD Identity Protection dashboard and alerts
		Automatically closing or resolving risk events
		Manually closing risk events
	Summary
	Questions
	Further reading
Section 3: Microsoft 365 Governance Compliance
Chapter 9: Configuring Data Loss Prevention (DLP)
	Configuring DLP policies
	Designing data retention policies in Microsoft 365
		Labels
		Label policies
	Monitoring and managing DLP policy matches
	Managing DLP exceptions
	Summary
	Questions
	Further reading
Chapter 10:  Implementing Azure Information Protection (AIP)
	Planning an AIP solution
	Planning for classification labeling
	Deploying AIP clients
	Implementing an AIP tenant key
	Planning for WIP implementation
	Configuring IRM for workloads
	Planning for the deployment of an on-premises Rights Management connector
	Implementing AIP policies
	Configuring a super user
	Summary
	Questions
	Further reading
Chapter 11: Managing Data Governance
	Planning and configuring information retention
		Retention period and deletion
		Locations
		Creating a retention policy
	Planning for a Microsoft 365 backup
	Planning for restoring deleted content
		Exchange
		SharePoint
		OneDrive
	Summary
	Questions
	Further reading
Chapter 12: Managing Auditing
	Configuring audit log retention
		Enabling auditing of SharePoint site activities
		Enabling auditing of Exchange mailbox activities
	Configuring the audit policy
	Monitoring unified audit logs
	Azure AD audit and sign-in logs
	Summary
	Questions
	Further reading
Chapter 13: Managing eDiscovery
	Searching content using the Security & Compliance Center
	Planning for in-place and legal holds
	Configuring eDiscovery
	Summary
	Questions
	Further reading
Section 4: Mock Exams
Chapter 14: Mock Exam 1
Chapter 15: Mock Exam 2
Assessments
Another Book You May Enjoy
Index