MS 20744 - Securing Windows Server 2016
- Secure Windows Server.
- Secure application development and a server workload infrastructure.
- Manage security baselines.
- Configure and manage just enough and just-in-time (JIT) administration.
- Manage data security.
- Configure Windows Firewall and a software-defined distributed firewall.
- Secure network traffic.
- Secure your virtualization infrastructure.
- Manage malware and threats.
- Configure advanced auditing.
- Manage software updates.
- Manage threats by using Advanced Threat Analytics (ATA) and Microsoft Operations Management Suite (OMS).
Pré-requisitos:
- Completado os cursos 20740, 20741 e 20742, ou equivalente.
- Uma compreensão sólida e prática dos fundamentos da rede, incluindo TCP/IP, UDP e DNS.
- Uma compreensão sólida e prática dos princípios do Active Directory Domain Services (AD DS).
- Uma compreensão sólida e prática dos fundamentos de virtualização do Microsoft Hyper-V.
Material incluso: Material Digital e Certificado Oficial Microsoft.
Quer saber mais informações sobre o curso, além de valores e datas de turmas? Matricule-se agora:
Module 1: Breach detection and using the Sysinternals tools
- Overview of breach detection
- Using the Sysinternals tools to detect breaches
Lab : Basic breach detection and incident response strategies
- Identifying attack types
- Using incident-response strategies
- Exploring the Sysinternals tools
Module 2: Protecting credentials and privileged access
- Understanding user rights
- Computer and service accounts
- Protecting credentials
- Understanding privileged-access workstations and jump servers
- Deploying a local administrator-password solution
Lab : User rights, security options, and group-managed service accounts
- Configuring security options
- Configuring restricted groups
- Delegating privileges
- Creating and managing group managed service accounts (MSAs)
- Configuring the Credential Guard feature
- Locating problematic accounts
Lab : Configuring and deploying LAPs
- Installing local administrator password solution (LAPs)
- Configuring LAPs
- Deploying LAPs
Module 3: Limiting administrator rights with Just Enough Administration
- Understanding JEA
- Configuring and deploying JEA
Lab : Limiting administrator privileges by using JEA
- Creating a role-capability file
- Creating a session-configuration file
- Creating a JEA endpoint
- Connecting to a JEA endpoint
- Deploying JEA by using Desire State Configuration (DSC)
Module 4: Privileged Access Management and administrative forests
- Understanding ESAE forests
- Overview of MIM
- Implementing JIT and Privileged Access Management by using MIM
Lab : Limiting administrator privileges by using Privileged Access Management
- Using a layered approach to security
- Exploring MIM
- Configuring a MIM web portal
- Configuring the Privileged Access feature
- Requesting privileged access
Module 5: Mitigating malware and threats
- Configuring and managing Windows Defender
- Using software restricting policies (SRPs) and AppLocker
- Configuring and using Device Guard
- Using and deploying the Enhanced Mitigation Experience Toolkit
Lab : Securing applications by using AppLocker, Windows Defender, Device Guard Rules, and the EMET.
- Configuring Windows Defender
- Configuring AppLocker
- Configuring and deploying Device Guard
- Deploying and using EMET
Module 6: Analysing activity by using advanced auditing and log analytics
- Overview of auditing
- Understanding advanced auditing
- Configuring Windows PowerShell auditing and logging
Lab : Configuring encryption and advanced auditing
- Configuring auditing of file-system access
- Auditing domain logons
- Managing the configuration of advanced audit policies
- Windows PowerShell logging and auditing
Module 7: Analysing activity with Microsoft Advanced Threat Analytics feature and Operations Management Suite
- Overview of Advanced Threat Analytics
- Understanding OMS
Lab : Advanced Threat Analytics and Operations Management Suite
- Using ATA and OMS
- Preparing and deploying ATA
- Preparing and deploying OMS
Module 8: Securing your virtualization an infrastructure
- Overview of Guarded Fabric VMs
- Understanding shielded and encryption-supported VMs
Lab : Deploying and using Guarded Fabric with administrator-trusted attestation and shielded VMs
- Deploying Guarded Fabric VMs with administrator-trusted attestation
- Deploying a shielded VM
Module 9: Securing application development and server-workload infrastructure
- Using Security Compliance Manager
- Introduction to Nano Server
- Understanding containers
Lab : Using Security Compliance Manager
- Configuring a security baseline for Windows Server 2016
- Deploying a security baseline for Windows Server 2016
Lab : Deploying and Configuring Nano Server and containers
- Deploying, managing, and securing Nano Server
- Deploying, managing, and securing Windows Server containers
- Deploying, managing, and securing Hyper-V containers
Module 10: Protecting data with encryption
- Planning and implementing encryption
- Planning and implementing BitLocker
Lab : Configuring EFS and BitLocker
- Encrypting and recovering access to encrypted files
- Using BitLocker to protect data
Module 11: Limiting access to file and folders
- Introduction to FSRM
- Implementing classification management and file-management tasks
- Understanding Dynamic Access Control (DAC)
Lab : Configuring quotas and file screening
- Configuring FSRM quotas
- Configuring file screening
Lab : Implementing DAC
- Preparing DAC
- Implementing DAC
Module 12: Using firewalls to control network traffic flow
- Understanding Windows Firewall
- Software-defined distributed firewalls
Lab : Windows Firewall with Advanced Security
- Creating and testing inbound rules
- Creating and testing outbound rules
Module 13: Securing network traffic
- Network-related security threats and connection-security rules
- Configuring advanced DNS settings
- Examining network traffic with Microsoft Message Analyzer
- Securing SMB traffic, and analysing SMB traffic
Lab : Connection security rules and securing DNS
- Creating and testing connection security rules
- Configuring and testing DNSSEC
Lab : Microsoft Message Analyzer and SMB encryption
- Using Microsoft Message Analyzer
- Configuring and verifying SMB encryption on SMB shares
Module 14: Updating Windows Server
- Overview of WSUS
- Deploying updates by using WSUS
Lab : Implementing update management
- Implementing the WSUS server role
- Configuring update settings
- Approving and deploying an update by using WSUS
- Deploying Windows Defender definition updates by using WSUS
O curso de MS 20744 - Securing Windows Server 2016 também está disponível na modalidade Online Ao vivo. As aulas são transmitidas, diretamente de Curitiba/PR em tempo real, como se você estivesse dentro da sala de aula.
Você pode assistir as aulas de MS 20744 - Securing Windows Server 2016 e desfrutar da experiência da sala de aula de qualquer lugar (com acesso à internet) no momento em que as aulas acontecem.
O aluno que estiver online terá a mesma experiência que os alunos presenciais, podendo realizar perguntas no horário destinado via chat ou microfone, e interagindo diretamente com o instrutor mostrando seus exercícios, via compartilhamento de tela.
Faça o treinamento de MS 20744 - Securing Windows Server 2016 de qualquer lugar do Brasil.
Quais os benefícios de participar do curso na modalidade online ao vivo?
- Participe das aulas diretamente do conforto da sua casa;
- Você que é de outra cidade ou estado poderá ter toda a qualidade dos cursos Elaborata na sua casa, sem se preocupar com custo de viagens e hospedagem;
- Você que é de Curitiba poderá fazer o curso economizando gastos como transporte público ou estacionamentos;
- Poderá tirar todas as suas dúvidas e compartilhar experiências com o instrutor e os alunos via chat, microfone e compartilhamento de tela;
- Terá acesso ao material digital como apostila, apresentações e exercícios, além de materiais complementares;
- Você receberá seu certificado digital por e-mail.
Quer saber mais informações sobre o curso, além de valores e datas de turmas? Matricule-se agora:
