Microsoft Exam Ref 70-744 Securing Windows Server 2016

Chapter 1: Implement server hardening solutions
1.1 Configure disk and file encryption
1.2 Implement server patching and updating solutions
1.3 Implement malware protection
1.4 Protect credentials
1.5 Create security baselines

Chapter 2: Secure a virtualization infrastructure
2.1 Implement a Guarded Fabric solution
2.2 Implement shielded and encryption-supported VMs

Chapter 3: Secure a network infrastructure
3.1 Configure Windows Firewall
3.2 Implement a software-defined distributed firewall
3.3 Secure network traffic

Chapter 4: Manage privileged identities
4.1 Implement an enhanced security administrative environment (ESAE) administrative forest design approach
4.2 Implement just-in-time (JIT) administration
4.3 Implement just-enough-administration (JEA)
4.4 Implement privileged access workstations (PAWs) and user rights assignments
4.5 Implement local administrator password solution (LAPS)

Chapter 5: Implement threat detection solutions
5.1 Configure advanced audit policies
5.2 Install and configure Microsoft Advanced Threat Analytics (ATA)
5.3 Determine threat detection solutions using Operations Management Suite (OMS)

Chapter 6: Implement workload-specific security
6.1 Secure application development and server workload infrastructure
6.2 Implement a secure file services infrastructure and dynamic access control (DAC).