1. Twenty-Five Most Important Key Points

• Microsoft 365 is a cloud-based subscription platform that bundles productivity apps, collaboration tools, cloud storage, security, and device management into one service.
• The platform evolved through four stages: Microsoft BPOS (pre-2010) → Office 365 (2010–2013) → Office 365 Expansion (2013–2020) → Microsoft 365 (2020–present).
• Microsoft 365 = everything in Office 365 + Windows Enterprise + Microsoft Intune + Microsoft Entra ID Premium + advanced security and device management.
• Office 365 licensing has three enterprise tiers — E1 (browser-only), E3 (desktop apps included), and E5 (advanced security & compliance).
• Microsoft 365 licensing has three enterprise tiers — E3 (modern workplace), E5 (advanced security), and E7 (AI-powered with Copilot).
• Office 365 E1 is ideal for frontline and call-center staff who only need email and Teams through a browser, with no desktop apps.
• Office 365 E3 adds full desktop Office apps (Word, Excel, PowerPoint, Outlook, Access) and suits regular office/knowledge workers.
• Office 365 E5 adds advanced threat protection, Data Loss Prevention (DLP), and Teams Phone — built for security- and compliance-sensitive organizations.
• Microsoft 365 E3 adds Windows Enterprise, Intune device management, and Entra ID Premium P1 on top of Office 365 E3.
• Microsoft 365 E5 adds Microsoft Defender, Entra ID Premium P2, Privileged Identity Management (PIM), and Identity Protection.
• Microsoft 365 E7 is Microsoft's AI-first tier, bundling Microsoft Copilot and intelligent automation directly into the license.
• Every new Microsoft 365 tenant automatically receives a default domain in the format companyname.onmicrosoft.com.
• A custom domain (e.g., company.com) lets an organization replace the default domain for professional, branded email addresses.
• The Microsoft 365 Admin Center (admin.microsoft.com) is the single web portal for managing users, licenses, domains, and security settings.
• Role-Based Access Control (RBAC) applies the principle of least privilege — each admin gets only the permissions their job requires.
• The Global Administrator role has full tenant control and should be assigned to very few, highly trusted individuals.
• The Helpdesk Administrator and Password Administrator roles are narrowly scoped to password resets and basic account support.
• The Exchange Administrator manages mailboxes, mail flow rules, and distribution groups within Exchange Online.
• The Teams Administrator configures Teams policies, meeting settings, and calling features.
• The SharePoint Administrator manages SharePoint sites, document libraries, and OneDrive sharing settings.
• The User Administrator creates accounts, assigns licenses, and manages groups — but cannot change tenant-wide settings.
• The Global Reader role gives read-only visibility across the tenant, ideal for auditors and compliance reviewers.
• DNS (Domain Name System) is what connects a custom domain to Microsoft 365 services such as email and authentication.
• A TXT record is used by Microsoft to verify that an organization actually owns the custom domain it wants to add.
• MX and CNAME records route email to Exchange Online and enable services like Outlook AutoDiscover once the domain is verified.
   

2. Twenty Definitions with Day-to-Day Examples

1. Microsoft 365

A cloud-based subscription suite combining Office apps, Teams, cloud storage, and security/device-management tools.

Everyday Example: A remote employee opens Outlook, joins a Teams call, and edits a shared Excel file from a coffee shop — all through one Microsoft 365 login.

2. Office 365

The earlier name and version of the platform, focused mainly on Office apps and cloud collaboration services.

Everyday Example: In 2015, a company subscribed to Office 365 purely to get cloud-hosted Outlook email and online Word/Excel for its staff.

3. Tenant

The dedicated, isolated instance of Microsoft 365 created for one organization, containing all its users, data, and settings.

Everyday Example: When Evision Technoserve signs up, it gets its own tenant — completely separate from any other company's data, even on the same Microsoft datacenter.

4. Cloud Computing

Delivering computing services (storage, apps, processing) over the internet instead of from local, on-site servers.

Everyday Example: An employee accesses last year's sales report from home without ever connecting to the office server room.

5. Subscription-Based Licensing

A pay-per-user, recurring (monthly/annual) payment model instead of a one-time software purchase.

Everyday Example: A company pays a monthly fee per employee for Microsoft 365 E3 rather than buying an Office DVD once.

6. Microsoft 365 Admin Center

The centralized web portal (admin.microsoft.com) used to manage users, licenses, domains, and service health.

Everyday Example: An IT admin logs into the Admin Center on Monday morning to onboard three new hires and assign their licenses.

7. RBAC (Role-Based Access Control)

A security model that grants administrators only the specific permissions their job role requires.

Everyday Example: A helpdesk agent can reset a forgotten password but cannot delete the company's custom domain — only a Global Admin can.

8. Global Administrator

The highest-privileged Microsoft 365 role, with full control over the entire tenant.

Everyday Example: The IT Head at a company is the only person with Global Administrator access to prevent misuse.

9. Custom Domain

A privately owned domain name added to Microsoft 365 so users can have professional, branded email addresses.

Everyday Example: ABC Technologies replaces employee@abctech.onmicrosoft.com with employee@abctech.com after adding its custom domain.

10. Default Domain

The onmicrosoft.com domain Microsoft automatically assigns when a tenant is first created.

Everyday Example: Before buying a domain, a startup's staff temporarily sign in as name@startup.onmicrosoft.com.

11. DNS (Domain Name System)

The internet's directory system that translates human-friendly domain names into technical destinations.

Everyday Example: Typing outlook.office.com into a browser works because DNS quietly translates that name into the correct server address.

12. TXT Record

A DNS record that stores text data, used by Microsoft 365 to verify that an organization truly owns a domain.

Everyday Example: An admin pastes a code like MS=ms39500721 into the domain registrar so Microsoft can confirm ownership before activating it.

13. MX Record (Mail Exchange)

A DNS record that tells the internet which mail server should receive email for a domain.

Everyday Example: When a client emails admin@evision.com, the MX record directs that message straight to Exchange Online instead of getting lost.

14. CNAME Record (Canonical Name)

A DNS record that creates an alias, pointing one hostname to another hostname rather than to an IP address.

Everyday Example: Typing www.evision.com in a browser is silently redirected, via a CNAME, to the site's actual hosting address on Azure.

15. Exchange Online

Microsoft's cloud-based email and calendaring service that is part of Microsoft 365.

Everyday Example: A sales manager schedules a client meeting and sends an invoice, both through their Exchange Online mailbox in Outlook.

16. Microsoft Teams

Microsoft 365's chat, video-meeting, and collaboration hub.

Everyday Example: A remote team holds its 9 a.m. daily stand-up over a Teams video call instead of meeting in a physical office.

17. OneDrive for Business

Cloud storage for individual users to save, sync, and access files from any device.

Everyday Example: A consultant saves a client proposal to OneDrive at the office and opens the same file on their phone during the commute home.

18. SharePoint Online

A cloud-based platform for team sites, document libraries, and organization-wide content sharing.

Everyday Example: The HR department publishes the updated leave policy on the company's SharePoint site for everyone to reference.

19. Microsoft Entra ID (Azure AD)

Microsoft's cloud identity and access-management service that handles sign-in and authentication.

Everyday Example: An employee signs into Teams, Outlook, and a third-party HR app using one single company login, thanks to Entra ID.

20. Multi-Factor Authentication (MFA)

A security method requiring a second proof of identity (like a phone code) in addition to a password.

Everyday Example: After typing their password, an employee must also approve a push notification on their phone before Outlook opens.

3. Ten Key Differences Between Technical Terms

1. Office 365 vs Microsoft 365

Aspect	Office 365	Microsoft 365
Core Focus	Productivity apps & cloud collaboration	Productivity + security + device management
Includes	Outlook, Teams, SharePoint, OneDrive, Office apps	All of Office 365 + Windows Enterprise, Intune, Entra ID Premium
Device Management	Not included	Included via Microsoft Intune
Best Fit	Organizations needing only apps & email	Organizations needing full modern-workplace management

2. Office 365 E1 vs Office 365 E3

Aspect	Office 365 E1	Office 365 E3
Desktop Office Apps	No (browser-based only)	Yes (full desktop Word, Excel, PowerPoint, Outlook, Access)
Target Users	Frontline / call-center staff	Regular office & knowledge workers
Cost	Lower	Higher than E1
Compliance Tools	Very limited	Basic information protection

3. Office 365 E3 vs Office 365 E5

Aspect	Office 365 E3	Office 365 E5
Security Level	Basic	Advanced threat protection
Compliance	Basic	Advanced Data Loss Prevention (DLP)
Calling	Not included	Teams Phone capability included
Best Fit	General corporate employees	Security- and compliance-sensitive teams

4. Microsoft 365 E3 vs Microsoft 365 E5

Aspect	Microsoft 365 E3	Microsoft 365 E5
Identity Protection	Entra ID Premium P1	Entra ID Premium P2 (Identity Protection, PIM)
Threat Defense	Basic Defender	Advanced Microsoft Defender suite
Access Control	Standard	Risk-based Conditional Access
Best Fit	Hybrid, general enterprises	Security-critical enterprises

5. Microsoft 365 E5 vs Microsoft 365 E7

Aspect	Microsoft 365 E5	Microsoft 365 E7
AI Capabilities	Limited	Full AI features
Microsoft Copilot	Available only as add-on	Included in the license
Focus	Security & compliance	Security + AI-driven productivity
Best Fit	Security-focused enterprises	AI-driven, automation-heavy enterprises

6. Default Domain vs Custom Domain

Aspect	Default Domain	Custom Domain
Format	company.onmicrosoft.com	company.com
Provided By	Microsoft, automatically	Purchased by the organization, then added
Removable	Cannot be fully removed	Can be added, changed, or removed
Professional Image	Looks generic	Looks branded and professional

7. TXT Record vs MX Record

Aspect	TXT Record	MX Record
Purpose	Verifies domain ownership	Routes incoming email
Used During	Initial domain addition	Ongoing email delivery
Failure Impact	Domain cannot be added to Microsoft 365	Emails fail to reach Exchange Online

8. MX Record vs CNAME Record

Aspect	MX Record	CNAME Record
Function	Directs email to a mail server	Creates an alias to another hostname
Typical Use	Exchange Online mail delivery	Outlook AutoDiscover, website redirection
Points To	A mail server	Another domain name (not an IP directly)

9. Global Administrator vs Global Reader

Aspect	Global Administrator	Global Reader
Access Level	Full read & write control	Read-only across the tenant
Can Make Changes?	Yes	No
Typical User	IT Manager / Senior Admin	Auditor / Compliance Officer

10. Helpdesk Administrator vs Password Administrator

Aspect	Helpdesk Administrator	Password Administrator
Scope	Broader first-level user support	Narrowly focused on passwords only
Can Unlock Accounts?	Yes	Limited, password-related only
Typical User	IT Support Engineer	Service Desk Personnel

4. Theoretical & Scenario-Based Questions and Answers

Q: 1. What is Microsoft 365, in simple terms?

A: It is Microsoft's all-in-one, cloud-based subscription platform that bundles Office apps, Teams, cloud storage, and security/device-management tools so people can work from anywhere.

Q: 2. Why did Microsoft rename Office 365 to Microsoft 365 in 2020?

A: Because the platform had grown beyond just Office apps and email to include Windows integration, device management, and enterprise security — the new name reflected that broader, complete workplace solution.

Q: 3. Scenario: A call center with 200 frontline agents needs only email and Teams, and wants the lowest cost. Which license fits best?

A: Office 365 E1 — it covers Outlook, Teams, and browser-based Office apps at a lower cost, which matches frontline needs without paying for unused desktop apps.

Q: 4. Scenario: The finance team creates complex Excel models daily and needs desktop Excel, not the browser version. Which license fits?

A: Office 365 E3 — it includes full desktop Office applications, which browser-only E1 does not provide.

Q: 5. Scenario: A bank must meet strict compliance regulations and wants advanced threat protection for email. Which license fits?

A: Office 365 E5 (or Microsoft 365 E5 if device/identity management is also needed) — it adds advanced threat protection, DLP, and compliance tools suited to regulated industries.

Q: 6. Scenario: A company issues laptops to all staff and wants to centrally push security policies and updates. Which license fits?

A: Microsoft 365 E3 — it adds Microsoft Intune for device management on top of the Office 365 E3 feature set.

Q: 7. Scenario: A new employee joins the company. Which admin role is responsible for creating their account and assigning a license?

A: The User Administrator — this role is specifically scoped to creating users, assigning/removing licenses, and managing groups.

Q: 8. Scenario: An employee forgets their password while working from home. Which role can resolve this with minimal privilege?

A: The Password Administrator (or Helpdesk Administrator) — either can reset the password without needing full Global Administrator access.

Q: 9. Scenario: An internal auditor needs to review the tenant's security configuration but must not be able to change anything. Which role is appropriate?

A: Global Reader — it provides read-only access across the tenant, letting the auditor review settings safely.

Q: 10. Scenario: Management wants to stop employees from recording Teams meetings. Which admin role configures this?

A: The Teams Administrator — this role manages Teams policies, including meeting and recording settings.

Q: 11. Scenario: A company just purchased company.com and wants Microsoft to recognize it as the owner before using it for email. What DNS record is needed first?

A: A TXT record — Microsoft issues a unique text value that must be added to the domain's DNS zone to prove ownership.

Q: 12. Scenario: After adding a custom domain, external emails to the company are bouncing. Which DNS record should be checked first?

A: The MX record — it must correctly point to Microsoft's mail servers so Exchange Online can receive incoming messages.

Q: 13. Scenario: Outlook is not automatically configuring itself for new users on the custom domain. What DNS record commonly resolves this?

A: A CNAME record — used for Outlook AutoDiscover so the client can automatically locate the right Microsoft 365 service endpoints.

Q: 14. What is the main purpose of the Microsoft 365 Admin Center?

A: It acts as a single, centralized portal where administrators manage users, licenses, domains, security settings, and monitor overall service health.

Q: 15. Why does Microsoft recommend using multiple, specific administrator roles instead of only Global Administrators?

A: To apply the principle of least privilege — reducing security risk, limiting the damage from a compromised account, and making it easier to audit who can do what.

Q: 16. In one line, what is the key difference between Office 365 and Microsoft 365?

A: Office 365 focuses on productivity and collaboration apps, while Microsoft 365 adds Windows Enterprise, device management, and advanced security on top of that.

Q: 17. Scenario: A consulting firm wants employees to use AI to draft reports and summaries directly inside Word and Teams. Which license best fits?

A: Microsoft 365 E7 — it is Microsoft's AI-focused tier with Microsoft Copilot and intelligent automation included.

Q: 18. What typically goes wrong if DNS records for a custom domain are misconfigured?

A: Email may fail to deliver or bounce, domain verification may fail, Outlook may not auto-configure, and users may face sign-in or service-discovery problems.

Q: 19. Scenario: A security team wants risk-based Conditional Access and Privileged Identity Management (PIM) for admin accounts. Which license fits?

A: Microsoft 365 E5 — it includes Entra ID Premium P2, which provides Identity Protection and Privileged Identity Management.

Q: 20. What is the default domain format assigned automatically when a Microsoft 365 tenant is created?

A: companyname.onmicrosoft.com—for example, evision.onmicrosoft.com.