Summary of "Microsoft 365 Certified Fundamentals (MS-900) Certification Full Course"
Course overview
Purpose: A full MS-900 (Microsoft 365 Certified: Fundamentals) course teaching the foundational cloud and Microsoft 365 concepts needed to pass MS-900.
-
Structure: Exam overview followed by deep coverage of:
- Cloud concepts
- Microsoft 365 apps and services
- Security, compliance, privacy and trust
- Pricing, licensing and support Plus related topics: Azure, identity, endpoint management, collaboration, analytics, Defender (security), Purview (compliance), Priva (privacy), and service health/support.
-
Tone: Instructor-led lecture (single presenter) with examples, use-cases, definitions and short practice questions.
Key exam facts
- Exam: Microsoft 365 Certified: Fundamentals (MS-900)
- Length: ~45 minutes, proctored, not open-book; interactive items possible
- Cost: $99
- Retake: 24 hours allowed after first attempt; later retake timing varies
- Languages: English, Japanese, Spanish, German, Chinese, French, Korean, Portuguese, Arabic, Russian, Italian
- Topic weightings:
- Cloud concepts: ~5–10%
- Microsoft 365 apps & services: ~45–50%
- Security, compliance, privacy & trust: ~25–30%
- Pricing, licensing & support: ~10–15%
Core concepts and lessons
1) Cloud computing fundamentals
- Definition: On-demand delivery of compute, storage, networking, apps and analytics over the internet.
- Key benefits: cost efficiency (pay-for-use), scalability, global access, reliability (redundancy), security/compliance.
- Cloud characteristics: on‑demand self‑service, broad network access, resource pooling, rapid elasticity, measured/metered services.
2) Cloud service models
- IaaS (Infrastructure as a Service)
- What: VMs, storage, networking (e.g., Azure VMs, Azure Storage).
- Use cases: website hosting, dev/test, disaster recovery, HPC.
- Responsibility: customer controls OS/apps; provider manages infra.
- PaaS (Platform as a Service)
- What: Platform for development & deployment (e.g., Azure App Service, Azure SQL).
- Use cases: rapid app development, data analytics, IoT backends, API management.
- Responsibility: provider manages OS/infrastructure; developer focuses on code.
- SaaS (Software as a Service)
- What: Ready-to-use apps over internet (e.g., Microsoft 365: Word, Excel, Teams, OneDrive).
- Use cases: email/collaboration, CRM, BI dashboards.
- Responsibility: provider manages application and infra; customer uses app and configures settings.
3) Cloud deployment models
- Public cloud: shared infrastructure (Azure, AWS, GCP) — cost-effective, scalable.
- Private cloud: dedicated to one organization — greater control & security.
- Hybrid cloud: combination of public + private — flexibility, data locality.
- Community cloud: shared by organizations with common requirements (e.g., government, healthcare).
4) Shared responsibility model
- Provider responsibilities: security of the cloud (physical infrastructure, host, network), hardware maintenance, platform reliability and compliance.
- Customer responsibilities: security in the cloud (data, identity, access, configuration), application-level controls and user access management.
- Example: In Microsoft 365 (SaaS), Microsoft ensures app availability/security; customer must manage user access & data protection.
5) Consumption-based pricing
- Pay only for resources consumed (compute hours, storage GB) — reduces capex, improves budgeting, enables dynamic scaling.
- Azure examples: VMs billed by runtime hours, blob storage billed by usage.
6) Availability, reliability, scalability & manageability
- High availability via redundancy, failover, geographic replication and automatic failover.
- Scalability via autoscaling to meet demand (cost efficiency & performance).
- Predictability: SLAs (e.g., 99.99%), cost predictability via subscription/usage models.
- Security & governance: encryption, identity controls (Azure AD / Entra ID), threat detection (Defender), compliance frameworks (GDPR, ISO).
- Manageability: centralized portals (Microsoft 365 admin center, Azure Portal), automation (Power Automate, Azure Automation), monitoring (Azure Monitor, Microsoft Sentinel) and reporting.
7) Microsoft 365 vs Office 365
- Office 365: suite of cloud productivity apps (Word, Excel, PowerPoint, Outlook, Teams).
- Microsoft 365: Office 365 plus intelligent cloud services, device management (Intune/Endpoint Manager), advanced security (Defender, Conditional Access), and OS licenses in some SKUs — a broader platform for modern/hybrid work.
8) Microsoft 365 tenant basics and setup
- Tenant: an organization’s dedicated Microsoft 365 instance (identity, services, data, licensing).
- Basic setup steps:
- Register domain name.
- Create user accounts.
- Assign licenses.
- Configure services (Exchange Online, SharePoint, Teams, OneDrive).
- Set security policies (MFA, conditional access) and compliance settings.
- Admin tools: Azure AD / Entra ID, Admin Center, Service Health, Compliance Center.
9) Productivity & collaboration apps
- Core apps: Word, Excel, PowerPoint, Outlook, OneNote (cloud co-authoring, AI features).
- Work management: Teams (hub for chat, meetings, files), Planner, To-Do, Project, Power Automate.
- Additional apps: OneDrive, SharePoint, Stream (video), Power BI (analytics), Forms.
- Collaboration: real-time co-authoring, Teams channels, file storage in OneDrive/SharePoint, integrations with Power Platform.
10) Microsoft 365 Copilot (AI)
- Integrated assistant across Word, Excel, PowerPoint, Outlook and Teams.
- Use-cases: draft text, summarize meetings, generate charts/formulas, automate workflows, extract insights.
- Benefits: productivity boost, creativity support, faster decision-making.
11) Employee experience & engagement
- Microsoft Viva:
- Connections (dashboard), Insights (personal/team well‑being & productivity), Topics (knowledge), Learning (training).
- Yammer: enterprise social network for communities, knowledge sharing, company-wide communication and live events.
12) Endpoint management, virtualization & update models
- Microsoft Endpoint Manager = Intune + Configuration Manager (co-management for hybrid).
- Manages Windows, iOS, Android, macOS devices; enforces policies and conditional access.
- Windows 365 vs Azure Virtual Desktop:
- Windows 365: Cloud PC, persistent personal desktop, simple, fixed per-user pricing.
- Azure Virtual Desktop: flexible VDI, multi-session, customizable and cost-optimized for large deployments.
- Windows as a Service & update channels:
- Feature updates (semi‑annual), quality updates (monthly), security updates (as needed).
- Deployment strategy: pilot → phased → broad.
- Microsoft 365 Apps update channels:
- Current Channel, Monthly Enterprise Channel, Semi-Annual Enterprise Channel, Insider/Beta.
13) Identity & access (Microsoft Entra ID / Azure AD)
- Entra ID: cloud identity and access management (authentication, SSO, conditional access, identity protection).
- Identity types: cloud-only users, hybrid identities (sync via Azure AD Connect), service identities, managed identities, device identities, app registrations.
- Hybrid identity: integrates on-prem AD with Entra ID (password hash sync, pass-through auth, federation).
- External identities: guest access, B2B/B2C scenarios, self-service sign-up, conditional access for guests.
14) Access management & Zero Trust
- Conditional Access: policies that consider user, device, location and risk signals; can require MFA, block access or limit resources.
- Global secure access / Security Service Edge (SSE): identity + network protections (secure web gateway, zero-trust network access).
- RBAC and Entra roles: predefined & custom roles, role assignments, Privileged Identity Management for just-in-time elevation and periodic role reviews.
15) Security: Microsoft Defender XDR
- Defender suite components: Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Vulnerability Management, Threat Intelligence.
- Co-pilot integration: natural language queries, incident summarization, hunting assistance.
- Capabilities: endpoint protection, email/collaboration protection, cloud app monitoring, identity threat detection, vulnerability prioritization.
16) Compliance & data governance: Microsoft Purview
- Purview features:
- Unified and advanced auditing
- eDiscovery (Core & Advanced)
- Compliance Manager (assessments and compliance score)
- Communication Compliance (ML detection, escalations)
- Data Lifecycle Management (retention policies, auto-labeling)
- Records Management (retention labels, event-based retention)
17) Privacy & trust: Service Trust Portal and Microsoft Priva
- Service Trust Portal / Trust Center: compliance documentation, audit reports and guidance.
- Microsoft privacy principles: transparency, control, security, accountability, beneficial use.
- Microsoft Priva: privacy management — discovery/classification of sensitive data, subject rights request automation, policy automation, privacy metrics and reporting.
18) Pricing, licensing & billing
- Models: subscription (monthly/annual), pay-as-you-go via Azure, free trials.
- Licensing types: per-user, device-based, volume licensing/Enterprise Agreements, add-ons for advanced features.
- Billing tools: Microsoft 365 admin center, Azure Cost Management, consolidated billing, PowerShell automation.
- Best practices: review assignments, monitor unused licenses, use admin tools and scripts.
19) Support, SLAs, Service Health & feedback
- Support options: self-help (Microsoft Learn, docs, community), standard included support, paid advanced support (Business Assist, Premier, Unified Support), FastTrack for onboarding.
- SLAs: uptime guarantees (financially-backed), incident severity levels, service credits for downtime.
- Service health: Microsoft 365 Admin Center (Service Health dashboard, Message center), Service Health API, mobile admin app.
- Feedback channels: Microsoft feedback portals, Customer Success Managers, co-creation programs, surveys.
Short actionable checklists
-
Microsoft 365 tenant setup
- Register domain name
- Create user accounts
- Assign licenses to users
- Configure services (Exchange, Teams, SharePoint, OneDrive)
- Set security policies (MFA, conditional access) and compliance controls
-
Choosing a cloud deployment model: assess factors
- Consider cost, security, compliance, data sensitivity, workload type and required control
- Public = cost & scale
- Private = strict security/compliance
- Hybrid = mix for both
-
Choosing Microsoft 365 Apps update channel
- Need latest features ASAP → Current Channel
- Need predictable monthly updates → Monthly Enterprise Channel
- Prioritize stability and testing → Semi‑Annual Enterprise Channel
- Test previews → Insider/Beta Channel
-
Shared responsibility summary
- Cloud provider: physical infrastructure, host/network security, platform availability, compliance certifications
- Customer: data, identity & access management, app configuration & secure usage, enforcing policies
-
Identity / hybrid integration basic flow
- On-prem AD → Azure AD Connect → synchronize users/passwords → enable SSO/pass-through/federation as needed
Representative examples and use-cases
- IaaS: host a website on Azure VMs; disaster recovery in Azure Blob Storage
- PaaS: deploy web/mobile apps on Azure App Service; use Azure Synapse for analytics
- SaaS: Microsoft 365 apps (Word, Excel, Teams), Salesforce (CRM), Power BI (BI)
- Windows 365: secure Cloud PC for temporary or BYOD scenarios
- Azure Virtual Desktop: multi-session VDI, legacy app support, cost optimization
- Defender for Office 365: block phishing in email and Teams
- Purview eDiscovery: legal hold and eDiscovery for litigation
Practical exam-oriented takeaways
- Focus MS-900 study on:
- Cloud concepts (models, benefits)
- Differences between IaaS/PaaS/SaaS and deployment models
- Microsoft 365 services and core app capabilities (Teams, OneDrive, SharePoint)
- Security, compliance and identity basics (MFA, conditional access, shared responsibility, Entra ID)
- Licensing/pricing basics and support options
- Understand use-cases and be able to match service models/tools to business requirements.
Speakers and primary sources
- Speaker / Presenter:
- Tech G — course presenter / narrator
- Primary sources and references:
- Microsoft product documentation (Azure, Microsoft 365)
- Microsoft Learn (exam details and guidance)
- Service/product names referenced: Microsoft Azure, Microsoft 365 (Office 365), Microsoft Entra ID (Azure AD), Microsoft Endpoint Manager / Intune / Configuration Manager, Windows 365, Azure Virtual Desktop, Microsoft Defender (XDR), Microsoft Purview, Microsoft Priva, Microsoft Viva, Teams, SharePoint, OneDrive, Power Platform (Power Automate, Power Apps), Power BI, FastTrack, Microsoft Trust Center / Service Trust Portal
(End of summary.)
Category
Educational
Share this summary
Is the summary off?
If you think the summary is inaccurate, you can reprocess it with the latest model.
Preparing reprocess...