Master Procurement & Inventory with SAP MM Training in Abu Dhabi

Domain 1: Deploy & Manage a Microsoft 365 Tenant

Exam Weight: 25–30%

•   Create and configure a Microsoft 365 tenant from scratch; implement and manage custom domains

•   Configure organization settings — Security & Privacy and Organizational Profile

•   Monitor M365 service health, Network Connectivity Insights, software updates, and M365 Backup

•   Monitor Microsoft 365 adoption and usage with analytics

•   Create and manage users in Microsoft Entra ID — including external guest users

•   Create and manage groups — Microsoft 365 groups, distribution lists, shared mailboxes

•   Manage and monitor Microsoft 365 licenses — including group-based licensing

•   Perform bulk user management using PowerShell scripts

•   Implement and manage built-in roles in Microsoft 365 and Microsoft Entra ID

•   Manage roles using Administrative Units — scoped admin access; Privileged Identity Management (PIM)

•   Just-in-time access — activating, approving, and reviewing PIM assignments

•   PowerShell for M365: MgGraph and ExchangeOnline modules; automate user provisioning and reporting

•   Deploying and administering a full M365 tenant — domains, org settings, service health, and M365 Backup

•   Managing users, groups, and roles at scale using the M365 admin center and PowerShell

•   Configuring PIM for just-in-time privileged access and delegated administration

•   Activity: Hands-on labs: M365 admin center | PowerShell scripts library | Tenant configuration checklist

Domain 2: Microsoft Entra Identity & Access

Exam Weight: 25–30%

•   Prepare for identity synchronization — run IdFix to fix directory errors

•   Microsoft Entra Connect Sync — installation, configuration, OU filtering, and attribute filtering

•   Microsoft Entra Cloud Sync — lightweight agent-based alternative; choosing Connect Sync vs. Cloud Sync

•   Monitor synchronization using Microsoft Entra Connect Health; troubleshoot synchronization errors

•   Authentication methods — FIDO2 keys, Authenticator app, SMS, OATH tokens

•   Self-Service Password Reset (SSPR) — configuration, registration, and monitoring

•   Microsoft Entra Password Protection — banned passwords and smart lockout

•   Combined security information registration — unified MFA and SSPR setup

•   Microsoft Entra ID Protection — user risk policy, sign-in risk policy; reviewing and remediating risky sign-ins

•   Plan and implement Conditional Access policies — block legacy auth, require MFA, require compliant device

•   CA What-If tool — testing policy impact before enforcement; authentication strengths for phishing-resistant MFA

•   Zero Trust principles — verify explicitly, least privilege, assume breach; Identity Governance and CAE

•   Synchronizing on-premises identity with Entra Connect Sync/Cloud Sync and troubleshooting sync issues

•   Implementing Zero Trust with Conditional Access for MFA, compliant devices, and risk-based access

•   Configuring SSPR, Password Protection, and Entra ID Protection for a resilient identity environment

•   Activity: Entra Connect Sync lab exercises | Conditional Access policy templates | MFA deployment guide

Domain 3: Manage Security with Microsoft Defender XDR

Exam Weight: 30–35%

•   Microsoft Defender XDR portal — unified incident queue, Microsoft Secure Score, and Exposure Management

•   Incidents — correlating alerts across endpoints, email, identity, and cloud apps

•   Advanced Hunting — KQL queries for proactive threat detection; Guided hunting and Threat Intelligence

•   Microsoft Defender XDR reports — email, endpoint, identity, and app summary

•   Defender for Office 365 — anti-phishing, anti-malware, anti-spam, Safe Links, Safe Attachments

•   Attack Simulation Training — phishing simulations and training campaigns

•   Defender for Endpoint — onboarding devices, security baselines, Vulnerability Management, and EDR

•   Device groups — configuring automated investigation levels; live response and investigation

•   Defender for Cloud Apps — Microsoft 365 app connector, activity policies, anomaly detection

•   Cloud App Discovery — analyzing shadow IT from endpoint traffic

•   App governance — managing OAuth app permissions and risky app detection

•   Operating Microsoft Defender XDR confidently — responding to incidents and hunting threats with KQL

•   Protecting email with Defender for Office 365 — Safe Links, Safe Attachments, anti-phishing

•   Managing endpoint security, vulnerability findings, and EDR with Defender for Endpoint

•   Activity: Defender XDR hands-on simulation labs | KQL query library for threat hunting | Attack Simulation Training playbooks

Domain 4: Manage Compliance with Microsoft Purview

Exam Weight: 10–15%

•   Microsoft Purview compliance portal — sensitive information types, trainable classifiers

•   Sensitivity labels — creating, publishing, configuring protection actions; auto-labeling and user-applied settings

•   Encryption with sensitivity labels — Rights Management and Double Key Encryption

•   Retention labels — record management, file plan, and disposition review

•   Retention label policies — adaptive and static scopes for workloads

•   Retention policies — M365 groups, Teams, Exchange, SharePoint, OneDrive

•   Monitoring label usage — Content explorer, Activity explorer, and label reports

•   DLP policy creation — templates, conditions, and actions for Exchange, SharePoint, OneDrive, Teams

•   Endpoint DLP — preventing sensitive data leaving managed Windows 10/11 devices

•   DLP alerts, events, and reports; Simulation mode — testing DLP policies before enforcement

•   Communication compliance, Insider risk management, eDiscovery, and Audit

•   Governing data with Microsoft Purview — implementing sensitivity labels, retention policies, and DLP across all M365 workloads

•   Auditing and investigating compliance events using Content explorer and Activity explorer

•   Implementing eDiscovery and insider risk management for regulated industries

•   Activity: Purview compliance portal lab exercises | DLP policy template library | Sensitivity label deployment guide