| Manage security and threats by using Microsoft Defender XDR | The biggest domain. Secure Score and Exposure Management, incident response with advanced hunting, Defender Threat Intelligence, Defender for Office 365 threat policies and attack simulations, Defender for Endpoint onboarding and vulnerability management, and Defender for Cloud Apps with Cloud App Discovery. | 30 to 35% |
| Deploy and manage a Microsoft 365 tenant | Tenant creation, domains, org settings, Service Health monitoring, network connectivity insights, Microsoft 365 Backup, users and groups including external users, group-based licensing, bulk management with Graph PowerShell, admin roles, administrative units, and PIM. | 25 to 30% |
| Implement and manage Microsoft Entra identity and access | Directory synchronization with Entra Connect Sync vs Cloud Sync, IdFix preparation, Connect Health monitoring, sync troubleshooting, authentication methods, SSPR, Password Protection, Identity Protection, and Conditional Access including MFA policies. | 25 to 30% |
| Manage compliance by using Microsoft Purview | Sensitive information types with keywords and regex, retention labels and policies, sensitivity labels, Content and Activity explorer monitoring, and DLP for Exchange, SharePoint, OneDrive, Teams, Power BI and Microsoft 365 Copilot, plus Endpoint DLP. | 10 to 15% |