MS-203 Cheat Sheet 2026

The 30 highest-yield MS-203 facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which Exchange Online PowerShell cmdlet is used to view all Microsoft 365 Groups in an organization? → Get-UnifiedGroup
2. What action does a remote device wipe perform on a mobile device enrolled in Exchange Online? → It resets the device to factory settings, erasing all data
3. What feature helps prevent users from sending sensitive data? → Data Loss Prevention
4. What is one way to protect mail flow in Microsoft 365? → Enable anti-phishing policies
5. A user reports they can read emails in a shared mailbox but cannot delete items. Which permission is missing? → FullAccess
6. Which Microsoft 365 tool is used to manage email policies? → Exchange admin center
7. Which type of Microsoft 365 Group provides a shared workspace that includes a mailbox, calendar, SharePoint site, and Teams channel? → Microsoft 365 Group
8. Which PowerShell cmdlet converts a regular user mailbox into a shared mailbox in Exchange Online? → Set-Mailbox -Type Shared
9. What is the maximum size of a single public folder mailbox in Exchange Online? → 50 GB
10. What does MFA stand for in Microsoft 365? → Multi-Factor Authentication
11. Which PowerShell cmdlet is used to convert an existing distribution group to a Microsoft 365 Group? → Upgrade-DistributionGroup
12. What does the -AllowSimplePassword parameter in a mobile device mailbox policy control? → Whether sequential or repeated characters are allowed in the device PIN
13. A user receives a Non-Delivery Report (NDR) with the enhanced status code '5.7.1'. Which of the following is the most common reason for this type of NDR? → The message was rejected due to a permissions issue or a mail flow rule.
14. What is a mail flow rule also known as? → Transport rule
15. What does Outlook on the web allow users to do? → Access emails via browser
16. What tool can administrators use to manage users and licenses? → Microsoft 365 admin center
17. How do you disable automapping for a shared mailbox so it does not automatically appear in Outlook? → Add-MailboxPermission with -AutoMapping $false
18. Which PowerShell cmdlet lists all mobile devices registered to a specific user's mailbox in Exchange Online? → Get-MobileDeviceStatistics
19. What type of information can be read from an email header? → Routing and security data
20. Which property must be configured on a Microsoft 365 Group to prevent non-members from sending email to the group? → Set-UnifiedGroup -RequireSenderAuthenticationEnabled $true
21. What is the benefit of using shared mailboxes? → Allow team collaboration on emails
22. Which cmdlet is used to create a new public folder mailbox in Exchange Online? → New-Mailbox -PublicFolder
23. Which Microsoft 365 admin center feature provides a unified view of both EAS and Microsoft Intune enrolled devices for compliance reporting? → Microsoft Endpoint Manager Admin Center (Intune)
24. Why is it important to read retention policy settings? → To manage data lifecycle
25. Which Microsoft 365 feature allows reading user mailbox access logs? → Audit logging
26. What is the purpose of reading message trace logs in Microsoft 365? → To trace email delivery paths
27. What is the default Exchange ActiveSync device access setting when a new device connects for the first time? → Quarantine
28. What does Outlook on the web allow users to do? → Access emails via browser
29. What feature helps prevent users from sending sensitive data? → Data Loss Prevention
30. Which report in the Microsoft 365 admin center shows shared mailbox usage including email activity? → Mailbox Usage Report