MS-100
Microsoft 365 Certified Enterprise Administrator Expert
Microsoft 365 Certified Enterprise Administrator Expert
A new version is in rollout — confirm which one is currently scheduled. MS-100 + MS-101 retired Sep 2023; consolidated into single MS-102 exam.
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Exam format
40–60 questions (multiple-choice + case studies), 120 minutes. Proctored via Pearson VUE. Passing threshold: 700/1000.
24-hour wait after first fail; 14 days between attempts 2-4. Max 5 attempts per 12-month window.
› Recertification
Valid 1 year. Free online renewal assessment on Microsoft Learn.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 2 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
AuthN/AuthZ, SSO, MFA, PAM, RBAC/ABAC, identity governance, FIDO2/passkeys, plus non-human identity: service accounts, workload identity, agent / plugin identities.
AWS/Azure/GCP security controls, IAM policies, CSPM, container security, shared responsibility model.
› Prerequisites
No formal prerequisites. Recommended: Experience with Microsoft 365 administration.
› Study materials
Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.
- Microsoft Learn (free)
- John Savill Study Crams (YouTube)
- MeasureUp Official M365-ENTERPRISE-ADMINISTRATOR-EXPERT Practice Test
› Version & lifecycle
MS-100 + MS-101 retired Sep 2023; consolidated into single MS-102 exam.
› Salary signal
Microsoft 365 admin/architect, US, 5+ years. Note: superseded by MS-102.
Robert Half Salary Guide + Glassdoor 'M365 Architect' aggregations · 2024 · US base only · p25–p75 range
› Common exam traps to study
Cybersecurity cert exams reuse the same 25 distractor patterns over and over — category confusion, RTO vs RPO, IDS vs IPS, MD5 vs SHA-256, and more. Once you can name the trap, you stop falling for it. Each archetype page covers what it is, the specific pairs candidates confuse, and how to avoid it.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.