MS-102 decision sheets

• Defender for Cloud Apps policy type selection
• Defender for Endpoint onboarding method selection
• Least-privilege Defender security role selection
• Least-privilege Entra role for identity tasks
• Entra Connect Sync vs Cloud Sync (and PHS vs PTA)
• Least-privilege admin role for M365 tenant tasks
• Retention labels vs retention policies