The Microsoft MS-100 2026 exam is one of two required to acquire the Microsoft 365 Certified: Enterprise Administrator Expert certification. The exam tests your knowledge and skills at deploying and managing Microsoft 365 services, functions, and operations across the organization. Passing the MS-100 exam indicates that a candidate can deploy, configure, and operate Microsoft 365 services, including security, identity management, communications and collaboration, productivity suite, and cloud applications. Candidates are also expected to manage commonly administered operations for some of the more advanced features of Microsoft 365 services.
The Microsoft MS-100 exam can be delivered as a computer-based (CBT) or a paper-based test (PBT) on Demand. Candidates are allowed to select only one testing method for the MS-100 exam.
The Microsoft MS-100 test questions cover various subjects, making the exam look tough to pass at first glance. An overview of the subjects on the test can help you identify what topics to study for your exam and which areas may be more difficult for you. Practice with the free MS-100 - Microsoft 365 Identity and Services practice test on PracticeTestGeeks (9 questions with answer explanations).
Below are some of the subjects covered on the Microsoft MS-100 exam:
Candidates will have 120 minutes to answer 50 multiple-choice questions. Passing the Microsoft MS-100 exam requires a scaled score of 600 on a scale from 100 to 900.
Numbers in brackets link to the official sources listed under Sources & last verified. Dates that have passed are removed automatically.
| Item | Detail | Source · Verified |
|---|---|---|
| Renewal | Free online assessment within 6 months prior to expiration[1] | Microsoft · Oct 28, 2026 |
| Delivery | Local test center or online proctored exam[2] | home.pearsonvue.com · Oct 28, 2026 |
| Eligibility | Retired September 30, 2023; new candidates must take replacement Exam MS-102[1] | Microsoft · Oct 28, 2026 |
Interactive MS-100 - Microsoft 365 Identity and Services resources on PracticeTestGeeks, free to start:
According to Microsoft, “This exam retired on September 30, 2023. A replacement exam, Exam MS-102: Microsoft 365 Administrator, is available for those who are earning the certification for the first time.”[1]
The content areas below are copied from the official MS-100 content outline published by Microsoft. The right-hand column shows which of our practice sets covers it.
| Official content area | Practice on this site |
|---|---|
| Deploy and manage a Microsoft 365 tenant[1] | MS-100 Microsoft 365 Tenant & Service Mana... Practise tenant setup, service health, admin roles and the settings an administrator must get right when a tenant is created. |
| Manage access and authentication[1] | MS-100 Hybrid Identity & Authentication Practise sign-in methods, multi-factor authentication, Conditional Access and how on-premises and cloud identities work together. |
| Plan and manage user identity and roles[1] | MS-100 Azure AD Identity Management Practise creating and syncing users and groups, assigning roles, and reviewing who holds privileged access. |
| Plan Microsoft 365 workloads and applications[1] | MS-100 Microsoft 365 Services Configuration Practise choosing and configuring Microsoft 365 services and apps to match a stated business requirement. |
Prepare for the MS-100 - Microsoft 365 Identity and Services exam with our free practice test modules. Each quiz covers key topics to help you pass on your first try.
These are practice questions written for this site, not questions from the real exam. Each explanation shows why the right answer is right and why the others are wrong.
Question: An admin needs to ensure that all Microsoft 365 admin role assignments are reviewed periodically. Which Azure AD feature supports this?
Answer: B. Azure AD Access Reviews
Explanation:
The requirement is that role assignments are reviewed periodically. Azure AD Access Reviews is built for that: it lets reviewers regularly confirm whether a person still needs a role or group membership, and removes access that is no longer justified.
Identity Protection is wrong because it detects risky sign-ins and risky users. It does not schedule reviews of who holds roles. Privileged Identity Management alerts warn about suspicious or unsafe role activity as it happens, which is not the same as a recurring certification of assignments. Conditional Access named locations only define network locations used inside access policies and have nothing to do with auditing roles.
Rule to remember: when a question says periodic, recurring or recertify, think Access Reviews. When it says risky or suspicious, think Identity Protection. When it says location or device, think Conditional Access.
Question: What is the value of written documentation in MS-100 professional communication?
Answer: B. It creates permanent records, ensures clarity, and provides legal protection
Explanation:
The correct answer is that written documentation creates permanent records, ensures clarity and provides legal protection. Written notes of decisions, changes and approvals can be checked later, which matters when an administrator has to show why a tenant setting was changed.
The option calling it optional is wrong because records are what let others verify and repeat the work. The option saying it replaces verbal communication is wrong because the two work together: a conversation sets direction, and a written follow-up fixes what was agreed. The option limiting it to formal occasions is wrong because routine changes need records too.
Rule to remember: this is a general professional-practice question, not a technical Microsoft 365 one. Answers that treat documentation as a lasting record that supports clarity and accountability are usually the right ones. Treat anything calling it optional or a burden with suspicion.
Question: Why is documentation important in MS-100 risk management?
Answer: B. It creates an audit trail, supports decision-making, and demonstrates due diligence
Explanation:
The correct answer is that documentation creates an audit trail, supports decision-making and demonstrates due diligence. In risk management, a written record shows what risk was identified, what was decided and why, so the reasoning can be reviewed later.
Calling it optional paperwork is wrong because without a record there is nothing to audit or learn from. Saying it only benefits legal teams is wrong because operations, security and management all use the same records to make and defend choices. Saying it slows down operations is wrong because it is a small cost compared with the confusion that follows undocumented decisions.
Rule to remember: when a question asks why records matter in risk work, pick the answer that links documentation to accountability and better decisions. Be wary of absolute wording such as only or optional.
Start with the official Microsoft Learn page for the exam you are actually taking. If that is MS-102, use it as your outline and treat these MS-100 sets as supporting practice for the identity and services topics they share.
Begin with a cold run of the general MS-100 test so you can see which areas feel weak. Write down every question you missed, and note whether the cause was a gap in knowledge or a misread question.
Treat the sets on communication, risk, quality and professional standards as general professional-practice review rather than Microsoft product knowledge, and give them less time than the technical sets. Finish by taking the general test again under quiet, uninterrupted conditions. Our questions are written by us and are not real exam questions, so use them to find gaps, not to predict what will appear.
The exam will consist of 40-60 questions that must be answered in 180 minutes. The Microsoft MS-100 exam requires a minimum score of 700 to pass.
You must not only train but also concentrate and focus on the task at hand in order to pass the exam. There are still additional possibilities for training. What matters is that you select the training choice that you are most comfortable with.
The Microsoft Certified Professional (MCP) Program is a Microsoft certification program that allows IT, professionals and developers, to demonstrate their technical ability by passing rigorous, industry-proven, and industry-recognized tests.
The Microsoft 365 Identity and Services (MS-100) exam is for Microsoft 365 Enterprise Administrators who are capable of evaluating, planning, migrating, deploying, and managing Microsoft 365 services.
You’ve got 120 minutes to finish 50 multiple-choice questions. This exam must be passed with a score of 70% or above.
Try these questions from our free MS-100 - Microsoft 365 Identity and Services practice tests. The correct answer and an explanation follow each question.
What is the purpose of the Microsoft 365 Message Center in the admin center?
Answer: B. To notify admins of upcoming service changes and new features
The Message Center publishes planned changes, new features, and actionable advisories that admins need to be aware of.
What is a risk mitigation strategy in MS-100 - Microsoft 365 Identity and Services practice?
Answer: B. Implementing controls that reduce the likelihood or impact of identified risks
This is fundamental to MS-100 - Microsoft 365 Identity and Services practice. Implementing controls that reduce the likelihood or impact of identified risks represents the professional standard for risk management in the MS-100 certification framework.
Before migrating mailboxes to Exchange Online, an admin wants evidence on the current on-premises Exchange organization's readiness. Which tool should be used?
Answer: A. Microsoft 365 Hybrid Configuration Wizard and its prerequisite checker
The Hybrid Configuration Wizard includes prerequisite validation that surfaces evidence of readiness gaps before hybrid deployment begins.
What is the purpose of Microsoft 365 Message Encryption (OME)?
Answer: B. Allows sending encrypted emails to any recipient regardless of their email provider
OME (Office Message Encryption) allows users to send encrypted emails to any external recipient including Gmail or Yahoo addresses without requiring special software.
Take the full MS-100 - Microsoft 365 Identity and Services practice test
How we verify: editorial & fact-checking policy. Report an error: contact us.