Securing Windows Server 2016
70-744
Money Back Guarantee
98% Success Rate
Real Questions
1
Implement Server Hardening Solutions 27.5%
1.1
Configure disk and file encryption
6 subtopics1.1.1Determine hardware and firmware requirements
1.1.2Deploy BitLocker encryption
1.1.3Configure Network Unlock feature
1.1.4Configure BitLocker Group Policy settings
1.1.5Implement BitLocker Recovery Process
1.1.6Manage Encrypting File System (EFS)
Learning Objectives
- Deploy and manage BitLocker Drive Encryption in various scenarios
- Configure disk and file-level encryption
- Implement recovery procedures for encrypted data
- Determine appropriate encryption solutions for different use cases
1.2
Implement server patching and updating solutions
3 subtopics1.2.1Install and configure WSUS
1.2.2Manage updates using WSUS
1.2.3Troubleshoot WSUS
Learning Objectives
- Deploy and configure Windows Server Update Services
- Manage update approvals and deployments
- Troubleshoot update delivery issues
1.3
Implement malware protection
3 subtopics1.3.1Implement Windows Defender
1.3.2Implement AppLocker
1.3.3Implement Control Flow Guard and Device Guard
Learning Objectives
- Implement comprehensive malware protection using Windows Defender
- Configure application whitelisting with AppLocker
- Deploy Code Integrity and Control Flow Guard policies
1.4
Protect credentials
2 subtopics1.4.1Implement Credential Guard
1.4.2Implement NTLM blocking
Learning Objectives
- Deploy and configure Credential Guard for credential protection
- Implement NTLM blocking to enforce stronger authentication
1.5
Create security baselines
1 subtopics1.5.1Use Microsoft Security Compliance Toolkit
Learning Objectives
- Create and manage security baselines using Microsoft Security Compliance Toolkit
- Deploy security configurations to various server types
Domain Hands-on Skills
Deploy BitLocker in multiple scenarios (TPM, non-TPM, clustered storage)Configure WSUS from installation through deploymentCreate AppLocker rules using PowerShellDeploy Credential Guard via multiple methodsUse Security Compliance Manager to create and deploy baselines
Common Mistakes to Avoid
- Not verifying TPM version compatibility before BitLocker deployment
- Forgetting to configure Network Unlock for automated boot scenarios
- Misconfiguring WSUS computer groups leading to incorrect update targeting
- Not testing AppLocker rules before production deployment
- Missing hardware requirements for Credential Guard
2
Secure a Virtualization Infrastructure 7.5%
3
Secure a Network Infrastructure 12.5%
4
Manage Privileged Identities 27.5%
5
Implement Threat Detection Solutions 17.5%
6