Microsoft Certified 365 Fundamentals (1 科 Microsoft 365 商務雲端) 國際認可證書課程
課程簡稱：Microsoft 365 Fundamentals Training Course

本中心是 Microsoft 認可的合作夥伴 (Microsoft Certified Partner)。

Microsoft 365 商務版

微軟提供了具有進階安全性 (Advanced Security) 和裝置管理 (Mobile Device Management) 的功能，令使用 Office 365 的員工發揮最佳生產力，從而協助保護您的企業。

微軟為您的中小企業提供整合式解決方案，極大幅度地節省購買軟件使用授權 (Software License) 的成本及i.t. 相關硬件基建 (Hardware and Server infrastructure) 等等開支！

Microsoft 365 商務版助您事半功倍 運用 Office 內建的智慧型工具創造最佳工作成果。 使用企業級的電子郵件和行事曆完成工作。 透過線上檔案儲存空間隨時隨地存取檔案。 輕鬆整合其他常用的 App 和解決方案。

Microsoft 365 商務版助您提升共同作業成效 在單一位置集中整合小組和資源。 與客戶、同事和供應商聯繫。 主持線上會議，增進共同作業與生產力。 您的員工可以隨時隨地透過任何裝置工作。

Microsoft 365 商務版保護您的資料安全 協助防範安全性威脅。 協助保護您的商務資料以免不慎外洩。 控制誰能存取您的商務資訊。 擁有協助您符合合規性的工具，讓您可以安心無虞。

Microsoft 365 商務版收費

現時，每位使用者僅須付月費 HK$155，便可以獲得微軟提供以下的 Microsoft 365 (價格已包含 Office 365) 的一系列服務：

Office 應用程式：

• 平板電腦和手機適用的 Office。
• 完整安裝和網頁版 Office App。

檢視及編輯檔案與文件：

• 1 TB 檔案儲存與共用空間。

共同作業服務：

• 企業級電子郵件 (50 GB)、行事曆和連絡人。
• 線上會議 (立即訊息、音訊和 HD 視訊聊天/會議)。
• Microsoft Teams 聊天式工作區。

商務應用程式：

• Outlook Customer Manager、Bookings.

安全性：

• 透過附件掃描與連結檢查，協助保護您的企業，免受不安全的附件、可疑的連結及其他未知惡意程式碼的威脅。
• 資訊保護原則可協助控制與管理存取資訊的方式。
• 控制以保護您在個人行動裝置上的公司資料。
• 保留、合規性與封存功能，提供不間斷的資料備份，隨時隨地都可存取資料。

裝置管理 (Mobile Device Management)。

• 安全地管理 iOS、Android、Windows 及 macOS 裝置。
• 使用 Windows AutoPilot 的自助式電腦部署 (Deployment)。
• 簡化控制項以管理 Windows 10 專業版電腦。
• 從 Window 7、8 或 8.1 專業版升級至 Windows 10 專業版。

Microsoft 365 商務版是專為以下環境而打造的：

使用者少於 300 人的中小型企業，而且需要提供員工頂級的生產力、共同作業功能以及保護各個裝置上的商務資料的完善解決方案。

修畢本課程後，學員便可考取下列 1 張國際認可證書：

Microsoft Certified 365 Fundamentals

本中心為Microsoft指定的考試試場。報考時請致電本中心，登記欲報考之科目考試編號、考試日期及時間 (最快可即日報考)。臨考試前要出示身份證及繳付每科 HK$615 之考試費。

考試題目由澳洲考試中心傳送到你要應考的電腦，考試時以電腦作答。所有考試題目均為英文，而大多數的考試題目為單項及多項選擇題。

考試合格後會收到來自Microsoft的作實電郵，並進入該電郵內的連結，登入 Certification Dashboard 下載您的證書。

考試不合格便可重新報考，不限次數。欲知道作答時間、題目總數、合格分數等詳細考試資料，可瀏覽本中心網頁 "各科考試分數資料"。

Exam MS-900: Microsoft Certified 365 Fundamentals

1. Overview of Microsoft 365 Enterprise
1.1 Components, Plans and Features of Microsoft 365 Enterprise
1.1.1 Components of Microsoft 365 Enterprise
1.1.2 Microsoft 365 Enterprise Plans
1.1.3 Microsoft 365 Enterprise Benefits
1.1.4 Microsoft 365 Enterprise Productivity services and tools
1.1.5 Microsoft 365 Enterprise based Modern Workplace
1.1.6 The Foundation Infrastructure of Microsoft 365 Enterprise
1.1.7 Workloads and Online Services provided by Microsoft 365 Enterprise
1.2 End of Service for Office 2010 clients, Servers and Windows 7
1.3 Three Ways to deploy Microsoft Enterprise 365
1.4 Additional Microsoft 365 solutions
1.4.1 Microsoft 365 Business
1.4.2 Microsoft 365 Education
1.4.3 Microsoft 365 Government

2. Microsoft 365 Cloud Architecture – Cloud Identity services
2.1 Microsoft Cloud Identity solutions for enterprise architects
2.2 Using Azure Active Directory as your Identity as a Service (IDaaS) provider
2.2.1 About Azure Active Directory Free Edition
2.2.2 About Azure Active Directory Basic Edition
2.2.3 About Azure Active Directory Premium Edition
2.3 Azure Active Directory integration capabilities
2.3.1 Integration across Microsoft’s cloud
2.3.2 Windows 10 Azure AD Join
2.3.3 Single sign-on to other SaaS apps in your environment
2.3.4 Azure AD MyApps panel
2.3.5 Azure AD B2B collaboration
2.3.6 Azure AD B2C collaboration
2.3.7 Azure AD Application Proxy
2.3.8 Azure Active Directory Domain services
2.4 Integrate your on-premises Windows Server AD accounts with Azure AD
2.4.1 Option 1: Directory and Password Hash Synchronization with Azure AD Connect
2.4.2 Options 2: Directory Federation
2.5 Running directory components in Azure IaaS
2.5.1 Azure AD Connect tool on Azure IaaS
2.5.2 AD FS with AD Connect Tool in Azure IaaS
2.5.3 Standalone Windows Server AD environment in Azure IaaS
2.6 Designing domain services for workloads in Azure IaaS
2.6.1 Use Azure AD Domain Services Extend Windows Server AD to your
2.6.2 Extend Windows Server AD to your Azure virtual machines
2.6.3 Connectivity options

3. Microsoft 365 Cloud Architecture – Cloud Security
3.1 Understanding Cloud Service Models
3.1.1 Software-as-a-Service (SaaS)
3.1.2 Platform-as-a-Service (PaaS)
3.1.3 Infrastructure-as-a-Service (IaaS)
3.1.4 Private Cloud
3.1.5 Responsibility of each Cloud Service Models
3.1.6 Governance & Security Policy
3.1.7 Administrative Privilege Management
3.1.8 Identity Systems and Identity Management
3.1.9 Threat Awareness
3.1.10 Data Protection

4. Microsoft 365 Cloud Architecture – Cloud Networking
4.1 Evolving your network for cloud connectivity
4.1.1 Before the cloud
4.1.2 After the cloud
4.1.3 Networking for SaaS
4.1.4 Networking for Azure PaaS
4.1.5 Networking for Azure IaaS
4.2 Elements and Connectivity options
4.2.1 Steps to prepare your On-premises network
4.2.2 Steps to prepare your Internet connectivity
4.2.3 Microsoft Cloud Connectivity options
4.3 Using ExpressRoute for connecting to Microsoft Cloud
4.3.1 Without ExpressRoute
4.3.2 With ExpressRoute
4.3.3 ExpressRoute Connectivity Models
4.3.4 ExpressRoute peering relationships to Microsoft 365 Cloud Services
4.3.5 Example deployment and traffic flow with ExpressRoute connection
4.4 Designing Networking for Azure Platform-as-a-Service
4.4.1 Internet Bandwidth for Azure PaaS
4.4.2 Using Azure Application Gateway
4.4.3 Azure Traffic Manager

5. Microsoft 365 Cloud Architecture – Hybrid Cloud
5.1 An Overview of Microsoft 365’s Hybrid Cloud solution
5.2 Microsoft 365 Hybrid Cloud Architecture
5.3 Hybrid Cloud Scenario for Microsoft SaaS (Office 365)
5.4 Skype for Business Hybrid
5.5 Cloud PBX with Skype for Business Server
5.6 SharePoint Hybrid
5.7 Exchange Server Hybrid
5.8 Hybrid Cloud solutions for Azure PaaS

6. Deploying Microsoft 365 Enterprise
6.1 Fastrack for Microsoft 365 Enterprise
6.1.1 Azure Subscription and Azure Active Directory preparation
6.1.2 Setting up a Free Account
6.1.3 Using Fast Track for deployment
6.2 Deploying Identity Management
6.2.1 Briefing
6.2.2 About Synchronized Identities
6.3 Implementing Password Hash Synchronization
6.3.1 Principal of Password Hash Synchronization
6.4 Monitoring AD Connect Synchronization Health
6.5 Azure AD Connect Sync Insight
6.5.1 Sync Latency
6.5.2 Sync Object Changes
6.6 Try or Buy a Microsoft 365 Subscription
6.7 Assign License to users

7. Windows Enterprise Client Deployment
7.1 Windows 10 Enterprise Deployment methods
7.2 Prepare your organization for Windows 10 Enterprise
7.2.1 Your domains must be added and verified
7.2.2 If you don’t wish to add users now
7.2.3 If you don’t want to license user now
7.3 Deploying Windows 10 Enterprise on new devices with Windows Autopilot
7.3.1 Setting up a Pre-existing device for Microsoft 365
7.3.2 About Windows Autopilot
7.3.3 Enroll Windows devices in Intune by using the Windows Autopilot
7.3.4 Assigning a user to a specific Autopilot Device
7.4 Microsoft Intune Enterprise Mobility Management
7.4.1 Introduction to Microsoft Intune
7.4.2 Working Principal of Windows Intune
7.4.3 Introduction to Microsoft Intune Device Management (MDM)
7.4.4 Introduction to Microsoft Intune App Management (MAM)
7.4.5 Enrolling Windows Devices
7.4.6 About Microsoft Intune App Management
7.4.7 Assign Office 365 apps to Windows 10 devices with Microsoft Intune
7.5 App Protection Policies
7.5.1 Introduction to App Protection Policies
7.5.2 How app protection policies protect app data
7.5.3 Creating an app protection policy
7.5.4 Selectively Wiping only Intune-managed Apps

8. Azure Information Protection
8.1 Introduction to Azure Information Protection
8.2 Define security and information protection levels
8.2.1 Three Tiers of protection
8.2.2 Information Protection Capabilities in each tier
8.3 File Protection Solutions in Microsoft 365
8.3.1 Default file encryption in Office 365
8.3.2 Permissions for SharePoint and OneDrive for Business libraries
8.3.3 External Sharing Policies
8.3.4 Device Access Policies for SharePoint Online and OneDrive for Business
8.3.5 Controlling access from unmanaged devices
8.4 Sensitive Data Protection in Microsoft 365
8.4.1 Introduction to data classification, labeling and protection
8.4.2 Protecting files in Office 365
8.4.3 Creating Sensitivity Label in Microsoft 365
8.5 Applying a Sensitivity Label automatically
8.6 Label Analytics

9. Data Loss Prevention
9.1 Introduction to Data Loss Prevention (DLP)
9.2 Creating a DLP Policy from 40+ Available Templates

10. MFA and Conditional Access
10.1 Introduction to Azure MFA Implementation
10.2 Implementing cloud-based Azure Multi-Factor Authentication
10.3 Installing Microsoft Authenticator App
10.4 Testing Azure MFA

11. Managing Domains in Microsoft 365
11.1 Basic Concepts of Domain and DNS in an Microsoft 365 Environment
11.1.1 About DNS Domain
11.1.2 Understanding DNS Record Types
11.1.3 DNS records help the Internet send email to the right place
11.1.4 Reasons to add a domain in Microsoft 365/Office 365
11.2 Using Domain Connect

12. Microsoft Cloud Solution Provider Program
12.1 Background information of Microsoft CSP
12.2 Direct or Indirect CSP
12.2.1 More about Direct bill model
12.2.2 More about Indirect bill model
12.3 About Enrollment process of Cloud Solution Provider program
12.3.1 Prerequisites before Enrollment
12.3.2 Information on Enrolling as Indirect reseller
12.3.3 Information on Enrolling as Direct reseller
12.3.4 Verify direct bill eligibility
12.4 Transitioning from Direct CSP to Indirect CSP Reseller