Module 1: Attacks, breach detection, and Sysinternals tools
- Understanding attacks
- Detecting breaches
- Examining activity with the Sysinternals tool
Module 2: Protecting credentials and privileged access
- Understanding user rights
- Computer and service accounts
- Protecting credentials
- Privileged-Access Workstations and jump servers
- Local administrator-password solution
Module 3: Limiting administrator rights with Just Enough Administration
- Understanding JEA
- Verifying and deploying JEA
Module 4: Privileged access management and administrative forests
- ESAE forests
- Overview of Microsoft Identity Manager
- Overview of JIT administration and PAM
Module 5: Mitigating malware and threats
- Configuring and managing Windows Defender
- Restricting software
- Configuring and using the Device Guard feature
- Deploying and using the EMET
Module 6: Analyzing activity with advanced auditing and log analytics
- Overview of auditing
- Advanced auditing
- Windows PowerShell auditing and logging
Module 7: Deploying and configuring Advanced Threat Analytics and Microsoft Operations Management Suite
- Deploying and configuring ATA
- Deploying and configuring Microsoft Operations Management Suite
Module 8: Secure Virtualization Infrastructure
- Guarded Fabric
- Shielded and encryption-supported virtual machines
Module 9: Securing application development and server-workload infrastructure
- Using SCM
- Introduction to Nano Server
- Understanding containers
Module 10: Planning and protecting data
- Planning and implementing encryption
- Planning and implementing BitLocker
Module 11: Optimizing and securing file services
- File Server Resource Manager
- Implementing classification management and file-management tasks
- Dynamic Access Control
Module 12: Securing network traffic with firewalls and encryption
- Understanding network-related security threats
- Understanding Windows Firewall with Advanced Security
- Configuring IPsec
- Datacenter Firewall
Module 13: Securing network traffic
- Network-related security threats and connection-security rules
- Configuring advanced DNS settings
- Examining network traffic with Microsoft Message Analyzer
- Securing SMB traffic, and analysing SMB traffic
Module 14: Updating Windows Server
- Overview of WSUS
- Deploying updates by using WSUS
