Microsoft Exam Syllabus

MS-900 syllabus, skills measured, and exam topics

The MS-900 exam measures Describe cloud concepts, Describe Microsoft 365 apps and services, and Describe security, compliance, privacy, and trust in Microsoft 365. Use this page to review the current official syllabus, major domains, and source links before exam day.

Skills measured by domain

Use the weighting table to decide where to spend the most study time.

Domain Weight
Describe cloud concepts 5–10%
Describe Microsoft 365 apps and services 45–50%
Describe security, compliance, privacy, and trust in Microsoft 365 25–30%
Describe Microsoft 365 pricing, licensing, and support 10–15%

What to know before you study

These sections explain the role, audience, and exam framing behind the outline.

Purpose of this document

  • This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.
  • Useful links: Description
  • How to earn the certification: Some certifications only require passing one exam, while others require passing multiple exams.
  • Your Microsoft Learn profile: Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
  • Exam scoring and score reports: A score of 700 or greater is required to pass.
  • Exam sandbox: You can explore the exam environment by visiting our exam sandbox.
  • Request accommodations: If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.
  • Take a free Practice Assessment: Test your skills with practice questions to help you prepare for the exam.

Updates to the exam

  • Our exams are updated periodically to reflect skills that are required to perform a role. We have included two versions of the Skills Measured objectives depending on when you are taking the exam.
  • We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. While Microsoft makes every effort to update localized versions as noted, there may be times when localized versions of an exam are not updated on this schedule. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.
  • The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
  • Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Audience profile

  • This exam is designed for you, if you’re looking to demonstrate foundational-level knowledge of cloud-based solutions to facilitate productivity and collaboration among on-site, remote, and hybrid workers. As a candidate, you may:
  • Have knowledge of cloud-based solutions.
  • Be new to Microsoft 365.
  • You can use this exam to prepare for other Microsoft certifications, but it’s not a prerequisite for the related ones.
  • As a candidate, you should be able to recommend Microsoft 365 solutions that address common organizational IT challenges. You should understand how Microsoft 365 solutions:
  • Improve productivity
  • Facilitate collaboration
  • Optimize communications
  • Help secure data
  • Identify and facilitate compliance
  • You should be able to recommend solutions for:
  • Endpoint and application management

Detailed outline

Scan each section as a working study checklist instead of one long wall of text.

Describe cloud concepts (5–10%)

  • Describe Microsoft software as a service (SaaS), infrastructure as a service (IaaS), and platform as a service (PaaS) concepts and use cases
  • Describe differences between Office 365 and Microsoft 365
  • Describe public, private, and hybrid cloud models
  • Compare costs and advantages of cloud, hybrid, and on-premises services
  • Describe the concept of hybrid work and flexible work

Describe Microsoft 365 apps and services (45–50%)

  • Describe the productivity and content creation capabilities of the core Microsoft 365 Apps including Microsoft Word, Excel, PowerPoint, and OneNote
  • Describe the productivity benefits and capabilities of Microsoft 365 Copilot and Microsoft 365 Copilot Chat
  • Describe project management capabilities of Microsoft 365 including Microsoft Project, Planner, Bookings, Forms, Lists, To Do, and Loop
  • Describe the collaboration and content sharing capabilities of Microsoft SharePoint, OneDrive, and Stream
  • Describe the email and calendaring capabilities of Microsoft Exchange and Outlook
  • Describe the collaboration and communication capabilities of Microsoft Teams and Teams Phone
  • Describe the collaboration benefits and capabilities of Microsoft 365 Copilot and Microsoft 365 Copilot Chat
  • Describe the employee experience capabilities of the Microsoft Viva apps
  • Describe the ways that you can extend Microsoft Teams by using collaborative apps such as Whiteboard, Microsoft Planner, Microsoft Power Apps, and Power Automate
  • Describe the endpoint management capabilities of Microsoft 365 including Microsoft Intune, co-management with Configuration Manager, Endpoint Analytics, Windows Autopilot, and Windows Autopatch
  • Compare the differences between Windows 365 and Azure Virtual Desktop
  • Describe the deployment and release models for Windows-as-a-Service (WaaS) including deployment rings

Describe security, compliance, privacy, and trust in Microsoft 365 (25–30%)

  • Describe the identity and access management capabilities of Microsoft Entra ID
  • Describe cloud identity, on-premises identity, and hybrid identity concepts
  • Describe how Microsoft uses methods such as multi-factor authentication (MFA), self-service password reset (SSPR), and conditional access, to keep identities, access, and data secure
  • Describe Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and the Microsoft Defender Portal
  • Describe Microsoft Secure Score benefits and capabilities
  • Describe how Microsoft 365 addresses the most common types of threats against endpoints, applications, and identities
  • Describe the Zero Trust Model
  • Describe Microsoft Purview compliance solutions such as insider risk, auditing, and eDiscovery
  • Describe Microsoft Purview Information Protection features such as sensitivity labels and data loss prevention
  • Describe how Microsoft supports data residency to ensure regulatory compliance
  • Describe the capabilities and benefits of Microsoft Priva

Describe Microsoft 365 pricing, licensing, and support (10–15%)

  • Describe the pricing model for Microsoft cloud services including enterprise agreements, cloud solution providers, and direct billing
  • Describe available billing and bill management options including billing frequency and methods of payment
  • Describe license management
  • Describe the differences between base licensing and add-on licensing
  • Describe how to create a support request for Microsoft 365 services
  • Describe support options for Microsoft 365 services
  • Describe service-level agreements (SLAs) including service credits
  • Determine service health status by using the Microsoft 365 admin center or the Microsoft Entra admin center