20744-Microsoft Securing Windows Server 2016

20744-Microsoft Securing Windows Server 2016

Ön Koşul

Katılımcıların bilişim kavramlarını anlayan; Server, Storage ve Network tecrübelerine sahip olmaları, eğitimin verimli geçmesini sağlar.

Etkinlik Hedefi

BT altyapısının güvenliğinin nasıl arttırılması gerektiği, ağ ihlallerinin gerçekleştiğinin önemi vurgulanır.

Etkinlik İçeriği

Module 1: Breach detection and using the Sysinternals tools

• Identifying attack types
• Using incident-response strategies
• Exploring the Sysinternals tools

Module 2: Protecting credentials and privileged access

• Understanding user rights
• Computer and service accounts
• Protecting credentials
• Understanding privileged-access workstations and jump servers
• Deploying a local administrator-password solution

Module 3: Limiting administrator rights with Just Enough Administration

• Understand JEA.
• Configure and deploy JEA.

Module 4: Privileged Access Management and administrative forests

• Understanding ESAE forests
• Overview of MIM
• Implementing JIT and Privileged Access Management by using MIM

Module 5: Mitigating malware and threats

• Configuring and managing Windows Defender
• Using software restricting policies (SRPs) and AppLocker
• Configuring and using Device Guard
• Using and deploying the Enhanced Mitigation Experience Toolkit

Module 6: Analysing activity by using advanced auditing and log analytics

• Overview of auditing
• Understanding advanced auditing
• Configuring Windows PowerShell auditing and logging

Module 7: Analysing activity with Microsoft Advanced Threat Analytics feature and Operations Management Suite

• Overview of Advanced Threat Analytics
• Understanding OMS

Module 8: Securing your virtualization an infrastructure

• Overview of Guarded Fabric VMs
• Understanding shielded and encryption-supported VMs

Module 9: Securing application development and server-workload infrastructure

• Using Security Compliance Manager
• Introduction to Nano Server
• Understanding containers

Module 10: Protecting data with encryption

• Planning and implementing encryption
• Planning and implementing BitLocker

Module 11: Limiting access to file and folders

• Introduction to FSRM
• Implementing classification management and file-management tasks
• Understand FSRM.
• Implement classification management and file-management tasks.
• Understand DAC.

Module 12: Using firewalls to control network traffic flow

• Understanding Windows Firewall
• Software-defined distributed firewalls

Module 13: Securing network traffic

• Network-related security threats and connection-security rules
• Configuring advanced DNS settings
• Examining network traffic with Microsoft Message Analyzer
• Securing SMB traffic, and analysing SMB traffic

Module 14: Updating Windows Server

• Overview of WSUS
• Deploying updates by using WSUS