🔒 Guided

Pre-launch preview. Authorised access only.

Incorrect code

Guided by A Guide to Cloud
Explore AB-900 AI-901
Guided MS-102 Domain 1
Domain 1 — Module 3 of 8 38%
3 of 28 overall

MS-102 Study Guide

Domain 1: Deploy and Manage a Microsoft 365 Tenant

  • Establish and Configure Your M365 Tenant
  • Monitor Tenant Health and Network Readiness
  • Adoption Tracking and Microsoft 365 Backup
  • Manage Users, Contacts and External Identities
  • Groups, Shared Mailboxes and Licensing at Scale
  • Automate with PowerShell: Bulk User Operations
  • Roles, Role Groups and Workload Permissions
  • Delegate with Administrative Units and PIM

Domain 2: Implement and Manage Microsoft Entra Identity and Access

  • Prepare for Identity Synchronization
  • Implement Connect Sync and Cloud Sync
  • Monitor and Troubleshoot Identity Sync
  • Authentication Methods and Self-Service Password Reset
  • Password Protection and Authentication Troubleshooting
  • Entra Identity Protection and Risk Policies
  • Conditional Access and MFA Enforcement

Domain 3: Manage Security and Threats by Using Microsoft Defender XDR

  • Defender XDR: Security Posture and Threat Intelligence
  • Investigate Incidents with Advanced Hunting
  • Defender for Office 365: Threat Policies
  • Email Threats, Attack Simulation and Restricted Entities
  • Defender for Endpoint: Onboard and Protect
  • Vulnerability Management
  • Defender for Cloud Apps: Connect and Govern
  • Cloud App Discovery and Activity Monitoring

Domain 4: Manage Compliance by Using Microsoft Purview

  • Sensitive Information Types and Data Classification
  • Retention Labels and Data Lifecycle
  • Sensitivity Labels and Monitoring
  • DLP Policies Across M365 Workloads
  • Endpoint DLP and Alert Response

MS-102 Study Guide

Domain 1: Deploy and Manage a Microsoft 365 Tenant

  • Establish and Configure Your M365 Tenant
  • Monitor Tenant Health and Network Readiness
  • Adoption Tracking and Microsoft 365 Backup
  • Manage Users, Contacts and External Identities
  • Groups, Shared Mailboxes and Licensing at Scale
  • Automate with PowerShell: Bulk User Operations
  • Roles, Role Groups and Workload Permissions
  • Delegate with Administrative Units and PIM

Domain 2: Implement and Manage Microsoft Entra Identity and Access

  • Prepare for Identity Synchronization
  • Implement Connect Sync and Cloud Sync
  • Monitor and Troubleshoot Identity Sync
  • Authentication Methods and Self-Service Password Reset
  • Password Protection and Authentication Troubleshooting
  • Entra Identity Protection and Risk Policies
  • Conditional Access and MFA Enforcement

Domain 3: Manage Security and Threats by Using Microsoft Defender XDR

  • Defender XDR: Security Posture and Threat Intelligence
  • Investigate Incidents with Advanced Hunting
  • Defender for Office 365: Threat Policies
  • Email Threats, Attack Simulation and Restricted Entities
  • Defender for Endpoint: Onboard and Protect
  • Vulnerability Management
  • Defender for Cloud Apps: Connect and Govern
  • Cloud App Discovery and Activity Monitoring

Domain 4: Manage Compliance by Using Microsoft Purview

  • Sensitive Information Types and Data Classification
  • Retention Labels and Data Lifecycle
  • Sensitivity Labels and Monitoring
  • DLP Policies Across M365 Workloads
  • Endpoint DLP and Alert Response
Domain 1: Deploy and Manage a Microsoft 365 Tenant Premium ⏱ ~14 min read

Adoption Tracking and Microsoft 365 Backup

Measure how your organisation uses Microsoft 365 with adoption reports and usage analytics, then protect critical data with Microsoft 365 Backup.

Two sides of tenant sustainability

☕ Simple explanation

Running a healthy tenant means two things: making sure people actually USE it, and making sure you can RECOVER if something goes wrong.

Adoption tracking answers: “Is our investment paying off? Are people using Teams for collaboration or still emailing spreadsheets?” Microsoft 365 Backup answers: “If ransomware hits or someone accidentally deletes a critical SharePoint site, can we get it back?”

One measures success. The other prevents catastrophe. Both are part of managing a production tenant.

Microsoft 365 provides two complementary operational capabilities covered in this module:

  • Usage analytics and adoption reports — built-in reports in the M365 admin center plus the Microsoft 365 Usage Analytics template for Power BI. These measure active users, feature adoption, collaboration patterns, and licence utilisation.
  • Microsoft 365 Backup — a first-party backup service (pay-as-you-go via Azure subscription) that protects Exchange Online mailboxes, SharePoint sites, and OneDrive accounts with point-in-time restore capabilities.

Both are managed from the Microsoft 365 admin center and tested on MS-102 from a configuration and interpretation perspective, not deep analytics or data engineering.

Part 1: Adoption and usage monitoring

Built-in usage reports

The M365 admin center (Reports > Usage) provides per-service activity reports:

ReportWhat It ShowsKey Metrics
Microsoft 365 active usersUsers who activated and used M365 servicesActive users by service, activation counts
Email activityExchange Online usageEmails sent/received, mailbox size
SharePoint activitySite and file interactionFiles viewed/edited, active sites
Teams activityMeetings, messages, callsMeeting minutes, channel messages, 1:1 calls
OneDrive activityFile storage and sharingFiles synced, shared, storage used
Microsoft 365 Apps usageDesktop/mobile/web app usageActive devices by platform, feature usage

Marcus’s adoption challenge

Oakwood Financial migrated to M365 six months ago, but the CFO asks: “Why are we paying for Teams when people still use email for everything?” Marcus pulls the reports:

  • Teams active users: 320 out of 800 (40% adoption)
  • Email activity: Flat — no reduction since migration
  • SharePoint active files: Only 50 sites created (most content still on file shares)

Marcus uses these numbers to:

  1. Identify low-adoption departments — accounting and legal are still on email only
  2. Plan targeted training — Teams workshops for the holdout departments
  3. Track progress monthly — dashboard shows adoption trending upward
ℹ️ Deep dive: Microsoft 365 Usage Analytics in Power BI

For deeper analysis, the Microsoft 365 Usage Analytics template app connects to your tenant via the Microsoft Graph reporting API and provides:

  • Trend analysis over 12 months
  • Cross-service adoption correlations
  • Licence utilisation vs purchased
  • Department-level breakdowns (if org data is populated)

To enable: M365 admin center > Reports > Usage > Enable Microsoft 365 Usage Analytics. Requires Power BI Pro or Premium licence for the person building reports. Data is anonymised by default — admins must opt in to show user-level details.

Microsoft Viva Insights (organisational analytics)

For deeper workplace analytics, Microsoft Viva Insights provides:

  • Meeting hours per week — are people in too many meetings?
  • Focus time — uninterrupted work blocks
  • Collaboration patterns — who works with whom across the org
  • Manager effectiveness — 1:1 meeting frequency, email after hours

Viva Insights is configured in the M365 admin center and requires a Viva Insights licence. The exam may ask about enabling and interpreting these analytics, not building custom queries.

Part 2: Microsoft 365 Backup

What Microsoft 365 Backup protects

Microsoft 365 Backup is a first-party backup and restore service that provides:

WorkloadWhat’s ProtectedRestore Capability
Exchange OnlineMailboxesPoint-in-time restore (any point within retention window)
SharePoint OnlineSites and librariesPoint-in-time restore of entire sites
OneDrive for BusinessUser drivesPoint-in-time restore of individual accounts

How it works

  1. Connect an Azure subscription for pay-as-you-go billing
  2. Create backup policies — select which mailboxes, sites, and OneDrive accounts to protect
  3. Backups run automatically — multiple snapshots per day
  4. Restore when needed — select a point in time and restore to the original location or a new location
Microsoft 365 Backup vs Recycle Bin vs Retention Policies
FeatureM365 BackupRecycle BinRetention Policies
PurposeDisaster recovery, ransomware recoveryAccidental deletion recoveryCompliance and legal holds
Retention periodConfigurable (up to years)93 days (SharePoint), 14-30 days (Exchange)Based on policy (1 year to unlimited)
Point-in-time restoreYes — any snapshot within retentionNo — only recovers deleted itemsNo — preserves but doesn't restore state
ScopeMailboxes, sites, OneDriveItems within a site or mailboxAll content matching policy criteria
CostPay-as-you-go (Azure billing)IncludedIncluded (some features need E5)
Managed fromM365 admin centerEach workload's recycle binMicrosoft Purview compliance portal
💡 Exam tip: Backup vs Retention — know the difference

The exam may present a scenario where data needs to be recovered after a ransomware attack. Key distinction:

  • Retention policies preserve data for compliance but don’t restore the tenant to a previous state
  • Recycle Bin helps with accidental deletions but has a limited window and no point-in-time restore
  • Microsoft 365 Backup is the only option that provides true point-in-time restore of an entire mailbox or SharePoint site to a state before the attack

If the question asks about “restoring to a previous state” or “recovering from ransomware,” the answer is Microsoft 365 Backup.

Elena’s backup scenario

MedGuard Health’s SharePoint site containing patient scheduling data is hit by ransomware — files are encrypted. Elena uses Microsoft 365 Backup to:

  1. Select the affected SharePoint site
  2. Choose a restore point from 2 hours before the attack
  3. Restore to the original location (overwriting encrypted files)
  4. Verify data integrity post-restore

Without M365 Backup, her only option would be the SharePoint recycle bin (which doesn’t help when files are encrypted, not deleted) or hoping version history has clean copies.

Key concepts to remember

Question

Where do you find Microsoft 365 usage reports in the admin center?

Click or press Enter to reveal answer

Answer

M365 admin center > Reports > Usage. Shows per-service reports for active users, email activity, Teams activity, SharePoint, OneDrive, and M365 Apps usage. For deeper analytics, enable Microsoft 365 Usage Analytics (requires Power BI).

Click to flip back
Question

What three workloads does Microsoft 365 Backup protect?

Click or press Enter to reveal answer

Answer

1. Exchange Online mailboxes, 2. SharePoint Online sites, 3. OneDrive for Business accounts. It provides point-in-time restore and requires an Azure subscription for pay-as-you-go billing.

Click to flip back
Question

How does Microsoft 365 Backup differ from retention policies?

Click or press Enter to reveal answer

Answer

M365 Backup provides point-in-time restore of entire workloads (mailboxes, sites, drives) for disaster recovery. Retention policies preserve content for compliance but don't restore the tenant to a previous state. Backup is for recovery; retention is for legal and compliance holds.

Click to flip back

Knowledge check

Knowledge Check

Marcus needs to prove to Oakwood Financial's CFO that the Microsoft 365 investment is paying off. Which approach gives him the most comprehensive adoption data across all M365 services?
Knowledge Check

Elena discovers that MedGuard Health's main SharePoint site was encrypted by ransomware an hour ago. Files are encrypted but not deleted. What is the fastest recovery method?

🎬 Video coming soon

Next up: Managing Users, Contacts and External Identities — from bulk user creation to B2B guest access at scale.

← Previous

Monitor Tenant Health and Network Readiness

Next →

Manage Users, Contacts and External Identities

Guided

I learn, I simplify, I share.

A Guide to Cloud YouTube Feedback

© 2026 Sutheesh. All rights reserved.

Guided is an independent study resource and is not affiliated with, endorsed by, or officially connected to Microsoft. Microsoft, Azure, and related trademarks are property of Microsoft Corporation. Always verify information against Microsoft Learn.