Microsoft 70-744 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Implement Server Hardening Solutions (25-30%) | |
| Configure disk and file encryption | -This objective may include but is not limited to: Determine hardware and firmware requirements for secure boot and encryption key functionality; deploy BitLocker encryption; deploy BitLocker without a Trusted Platform Module (TPM); deploy BitLocker with a TPM only; configure the Network Unlock feature; configure BitLocker Group Policy settings; enable Bitlocker to use secure boot for platform and BCD integrity validation; configure BitLocker on Cluster Shared Volumes (CSVs) and Storage Area Networks (SANs); implement BitLocker Recovery Process using self-recovery and recovery password retrieval solutions; configure Bitlocker for virtual machines (VMs) in Hyper-V; determine usage scenarios for Encrypting File System (EFS); configure the EFS recovery agent; manage EFS and BitLocker certificates, including backup and restore |
| Implement malware protection | -This objective may include but is not limited to: Implement antimalware solution with Windows Defender; integrate Windows Defender with WSUS and Windows Update; configure Windows Defender using Group Policy; configure Windows Defender scans using Windows PowerShell; implement AppLocker rules; implement AppLocker rules using Windows PowerShell; implement Control Flow Guard; implement Code Integrity (Device Guard) Policies; create Code Integrity policy rules; create Code Integrity file rules |
| Protect credentials | -This objective may include but is not limited to: Determine requirements for implementing Credential Guard; configure Credential Guard using Group Policy, WMI, command prompt, and Windows PowerShell; implement NTLM blocking |
| Create security baselines | -This objective may include but is not limited to: Install and configure Microsoft Security Compliance Toolkit; create, view, and import security baselines; deploy configurations to domain and non-domain joined servers |
Secure a Virtualization Infrastructure (5-10%) | |
| Implement a Guarded Fabric solution | -This objective may include but is not limited to: Install and configure the Host Guardian Service (HGS); configure Admin-trusted attestation; configure TPM-trusted attestation; configure the Key Protection Service using HGS; migrate Shielded VMs to other guarded hosts; troubleshoot guarded hosts |
| Implement Shielded and encryption-supported VMs | -This objective may include but is not limited to: Determine requirements and scenarios for implementing Shielded VMs; create a shielded VM using only a Hyper-V environment; enable and configure vTPM to allow an operating system and data disk encryption within a VM; determine requirements and scenarios for implementing encryption-supported VMs; troubleshoot Shielded and encryption-supported VMs |
Secure a Network Infrastructure (10-15%) | |
| Configure Windows Firewall | -This objective may include but is not limited to: Configure Windows Firewall with Advanced Security; configure network location profiles; configure and deploy profile rules; configure firewall rules for multiple profiles using Group Policy; configure connection security rules using Group Policy, the GUI management console, or Windows PowerShell; configure Windows Firewall to allow or deny applications, scopes, ports, and users using Group Policy, the GUI management console, or Windows PowerShell; configure authenticated firewall exceptions; import and export settings |
| Implement a Software Defined Datacenter Firewall | -This objective may include but is not limited to: Determine requirements and scenarios for Datacenter Firewall implementation with Software Defined Networking; determine usage scenarios for Datacenter Firewall policies and network security groups; Configure Datacenter Firewall Access Control Lists |
| Secure network traffic | -This objective may include but is not limited to: Configure IPsec transport and tunnel modes; configure IPsec authentication options; configure connection security rules; implement isolation zones; implement domain isolation; implement server isolation zones; determine SMB 3.1.1 protocol security scenarios and implementations; enable SMB encryption on SMB Shares; configure SMB signing via Group Policy; disable SMB 1.0; secure DNS traffic using DNSSEC and DNS policies; install and configure Microsoft Message Analyzer (MMA) to analyze network traffic |
Manage Privileged Identities (25-30%) | |
| Implement Just-In-Time (JIT) Administration | -This objective may include but is not limited to: Create a new administrative (bastion) forest in an existing Active Directory environment using Microsoft Identity Manager (MIM); configure trusts between production and bastion forests; create shadow principals in bastion forest; configure the MIM Web portal; request privileged access using the MIM Web portal; determine requirements and usage scenarios for Privileged Access Management (PAM) solutions; create and Implement MIM policies; implement Just-in-Time administration principals using time-based policies; request privileged access using Windows PowerShell |
| Implement Just-Enough-Administration (JEA) | -This objective may include but is not limited to: Enable a JEA solution on Windows Server 2016; create and configure session configuration files; create and configure role capability files; create a JEA endpoint; connect to a JEA endpoint on a server for administration; view logs; download WMF 5.1 to a Windows Server 2008 R2; configure a JEA endpoint on a server using Desired State Configuration (DSC) |
| Implement Privileged Access Workstations (PAWs) and User Rights Assignments | -This objective may include but is not limited to: Implement a PAWS solution; configure User Rights Assignment group policies; configure security options settings in Group Policy; enable and configure Remote Credential Guard for remote desktop access; Implement an Enhanced Security Administrative Environment (ESAE) administrative forest design approach; Determine usage scenarios and requirements for implementing ESAE forest design architecture to create a dedicated administrative forest |
| Implement Local Administrator Password Solution (LAPS) | -This objective may include but is not limited to: Install and configure the LAPS tool; secure local administrator passwords using LAPS; manage password parameters and properties using LAPS |
Implement Threat Detection Solutions (15-20%) | |
| Configure advanced audit policies | -This objective may include but is not limited to: Determine the differences and usage scenarios for using local audit policies and advanced auditing policies; implement auditing using Group Policy and AuditPol.exe; implement auditing using Windows PowerShell; create expression-based audit policies; configure the Audit PNP Activity policy; configure the Audit Group Membership policy; enable and configure Module, Script Block, and Transcription logging in Windows PowerShell |
| Install and configure Microsoft Advanced Threat Analytics (ATA) | -This objective may include but is not limited to: Determine usage scenarios for ATA; determine deployment requirements for ATA; install and configure ATA Gateway on a dedicated server; install and configure ATA Lightweight Gateway directly on a domain controller; configure alerts in ATA Center when suspicious activity is detected; review and edit suspicious activities on the attack time line |
| Determine threat detection solutions using Operations Management Suite (OMS) | -This objective may include but is not limited to: Determine usage and deployment scenarios for OMS; determine security and auditing functions available for use; determine Log Analytics usage scenarios |
Implement Workload-Specific Security (5-10%) | |
| Secure application development and server workload infrastructure | -This objective may include but is not limited to: Determine usage scenarios, supported server workloads, and requirements for deployments; determine usage scenarios and requirements for Windows Server and Hyper-V containers; install and configure containers |
| Implement a secure file services infrastructure and Dynamic Access Control (DAC) | -This objective may include but is not limited to: Install the File Server Resource Manager (FSRM) role service; configure quotas; configure file screens; configure storage reports; configure file management tasks; configure File Classification Infrastructure (FCI) using FSRM; implement work folders; configure file access auditing; configure user and device claim types; implement policy changes and staging; perform access-denied remediation; create and configure Central Access rules and policies; create and configure resource properties and lists |
Reference: https://www.microsoft.com/en-us/learning/exam-70-744.aspx
70-744 Deutsch : Securing Windows Server 2016 (70-744 Deutsch Version) Exam is definitely an important certificate test that Microsoft people need to get, but it is regarded as an boring and very difficult task without 70-744 Deutsch latest dumps for our candidates .Maybe you didn't resort to any exam auxiliary tools and question reference books within the whole your school life, we hold that point too .But 70-744 Deutsch Exam of course ,is not the same as our school exams ,it is more complicated and we absolutely need someone professional to help us to overcome such a challenge. Our company has been providers of 70-744 Deutsch : Securing Windows Server 2016 (70-744 Deutsch Version) dumps for many years and has been the pass-king in this this industry. We have formed a group of elites who have spent a great of time in Exam .They have figured out the outline of Microsoft Exam process and summarized a series of guideline to help enormous candidates to pass exams as we are the 70-744 Deutsch test-king.
Professional in R & D Microsoft exam materials many years
We specialize in Microsoft certification materials for many years and have become the tests passing king in this this field, we assure you of the best quality and moderate of our 70-744 Deutsch : Securing Windows Server 2016 (70-744 Deutsch Version) dump and we have confidence that we can do our best to promote our business partnership. We look forward your choice for your favor.
Who should take the 70-744 exam
The Microsoft 70-744 Exam is an internationally recognized validation that identifies persons who earn it as possessing skilled in Microsoft Certified System Engineer Certification. If candidates want significant improvement in career growth needs enhanced knowledge, skills, and talents. The Microsoft 70-744 Exam provides proof of this advanced knowledge and skill. If a candidate has knowledge of associated technologies and skills that are required to pass the Microsoft 70-744 Exam then he should take this exam.
Purchasing package of three version shares great discount
We can provide preferential terms or great large discount if you buy the package of 70-744 Deutsch latest dumps. You can choose two or three of them, and look the price again, we are sure that it will interest you.
Thanks for choosing our 70-744 Deutsch : Securing Windows Server 2016 (70-744 Deutsch Version) dump materials as we are the Microsoft 70-744 Deutsch test king, having a fun day!
After purchase, Instant Download: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
PDF & Soft & APP pass-king products for your choice
To give you a general idea of the various kinds of 70-744 Deutsch exam dump files in this purchasing interface, there are some advantages respectively.
For PDF version, you can print 70-744 Deutsch : Securing Windows Server 2016 (70-744 Deutsch Version) dump out as you may want to have some notes in the process of learning.
For PC Test Engine, you can download it into your computer (noted! Only for windows systems), one strong point is that PC version of 70-744 Deutsch latest dumps can be downloaded again in another computer which seldom providers can meet.
For APP Test Engine, this version of 70-744 Deutsch dumps VCE is the most convenient version we provide, and of course it is a little expensive ,but it can be used in all mobile devices for your choose. For example, you can download the APP version of 70-744 Deutsch : Securing Windows Server 2016 (70-744 Deutsch Version) dump into your phone and have a test whenever and wherever even there are no Internet. But you need have the first download and use of materials in the APP.
Free demo for your trial & satisfying customer service
If you have determined to register for this examination, we are glad to inform you that we can be your truthful partner. In the purchasing interface, you can have a trial for 70-744 Deutsch : Securing Windows Server 2016 (70-744 Deutsch Version) dump with "download for free" privilege we provide .There will be several questions and relevant answers, you can have a look at the free demo of 70-744 Deutsch latest dumps as if you can understand it or if it can interest you, then you can make a final decision for your favor. There are customer service executives 24/7/365 for your convenience, and once 70-744 Deutsch exam dump files have some changes, our experts group will immediately send a message to your mailbox plus corresponding updated version for free for one-year .So in the process of your preparation for your exam with our 70-744 Deutsch : Securing Windows Server 2016 (70-744 Deutsch Version) dump, you needn't worry about the exam tools as we are the 70-744 Deutsch test-king that customers' satisfaction is our mission.
