Microsoft 70-744 : Securing Windows Server 2016
- Exam Code: 70-744
- Exam Name: Securing Windows Server 2016
- Updated: Sep 07, 2025
- Q & A: 245 Questions and Answers
About Microsoft 70-744 Exam
The benefit in Obtaining the 70-744 Exam Certification
- When Candidates applying for a job or looking to promotion in their current position, a Microsoft Certified System Engineer certification in the field in which Candidates are applying will put you at the top of the list and make them a desirable candidate for employers.
- Candidates will get in-depth knowledge by completing the courses along with the access to revision materials for 6 months upon completion means they will have a wider skill set when it comes to the various technologies and systems than an uncertified professional. Certified Professional in this particular skill set is 74% more efficient when it comes to completing their tasks in a timely well-executed manner.
- After completion of Microsoft Certified System Engineer Certification candidates receive official confirmation from Microsoft that you are now fully certified in their chosen field. This can be now added to their CV, cover letters and job applications.
- Organization owners invest a lot in their employees when it comes to their training with the goal of making them quicker, more efficient, and more knowledgeable about their role. Certified Professional will reduce the time he spends on tasks, meaning he can get more done this could help reduce company downtime when repairing faults on a system or fixing hardware problems.
- Becoming a Microsoft Certified System Engineer means one thing you are worth more to the company and therefore more to yourself in the form of an upgraded pay package. On average a Microsoft Certified System Engineer member of staff is estimated to be worth 30% more to a company than their uncertified professionals.
Microsoft 70-744 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Implement Server Hardening Solutions (25-30%) | |
| Configure disk and file encryption | -This objective may include but is not limited to: Determine hardware and firmware requirements for secure boot and encryption key functionality; deploy BitLocker encryption; deploy BitLocker without a Trusted Platform Module (TPM); deploy BitLocker with a TPM only; configure the Network Unlock feature; configure BitLocker Group Policy settings; enable Bitlocker to use secure boot for platform and BCD integrity validation; configure BitLocker on Cluster Shared Volumes (CSVs) and Storage Area Networks (SANs); implement BitLocker Recovery Process using self-recovery and recovery password retrieval solutions; configure Bitlocker for virtual machines (VMs) in Hyper-V; determine usage scenarios for Encrypting File System (EFS); configure the EFS recovery agent; manage EFS and BitLocker certificates, including backup and restore |
| Implement malware protection | -This objective may include but is not limited to: Implement antimalware solution with Windows Defender; integrate Windows Defender with WSUS and Windows Update; configure Windows Defender using Group Policy; configure Windows Defender scans using Windows PowerShell; implement AppLocker rules; implement AppLocker rules using Windows PowerShell; implement Control Flow Guard; implement Code Integrity (Device Guard) Policies; create Code Integrity policy rules; create Code Integrity file rules |
| Protect credentials | -This objective may include but is not limited to: Determine requirements for implementing Credential Guard; configure Credential Guard using Group Policy, WMI, command prompt, and Windows PowerShell; implement NTLM blocking |
| Create security baselines | -This objective may include but is not limited to: Install and configure Microsoft Security Compliance Toolkit; create, view, and import security baselines; deploy configurations to domain and non-domain joined servers |
Secure a Virtualization Infrastructure (5-10%) | |
| Implement a Guarded Fabric solution | -This objective may include but is not limited to: Install and configure the Host Guardian Service (HGS); configure Admin-trusted attestation; configure TPM-trusted attestation; configure the Key Protection Service using HGS; migrate Shielded VMs to other guarded hosts; troubleshoot guarded hosts |
| Implement Shielded and encryption-supported VMs | -This objective may include but is not limited to: Determine requirements and scenarios for implementing Shielded VMs; create a shielded VM using only a Hyper-V environment; enable and configure vTPM to allow an operating system and data disk encryption within a VM; determine requirements and scenarios for implementing encryption-supported VMs; troubleshoot Shielded and encryption-supported VMs |
Secure a Network Infrastructure (10-15%) | |
| Configure Windows Firewall | -This objective may include but is not limited to: Configure Windows Firewall with Advanced Security; configure network location profiles; configure and deploy profile rules; configure firewall rules for multiple profiles using Group Policy; configure connection security rules using Group Policy, the GUI management console, or Windows PowerShell; configure Windows Firewall to allow or deny applications, scopes, ports, and users using Group Policy, the GUI management console, or Windows PowerShell; configure authenticated firewall exceptions; import and export settings |
| Implement a Software Defined Datacenter Firewall | -This objective may include but is not limited to: Determine requirements and scenarios for Datacenter Firewall implementation with Software Defined Networking; determine usage scenarios for Datacenter Firewall policies and network security groups; Configure Datacenter Firewall Access Control Lists |
| Secure network traffic | -This objective may include but is not limited to: Configure IPsec transport and tunnel modes; configure IPsec authentication options; configure connection security rules; implement isolation zones; implement domain isolation; implement server isolation zones; determine SMB 3.1.1 protocol security scenarios and implementations; enable SMB encryption on SMB Shares; configure SMB signing via Group Policy; disable SMB 1.0; secure DNS traffic using DNSSEC and DNS policies; install and configure Microsoft Message Analyzer (MMA) to analyze network traffic |
Manage Privileged Identities (25-30%) | |
| Implement Just-In-Time (JIT) Administration | -This objective may include but is not limited to: Create a new administrative (bastion) forest in an existing Active Directory environment using Microsoft Identity Manager (MIM); configure trusts between production and bastion forests; create shadow principals in bastion forest; configure the MIM Web portal; request privileged access using the MIM Web portal; determine requirements and usage scenarios for Privileged Access Management (PAM) solutions; create and Implement MIM policies; implement Just-in-Time administration principals using time-based policies; request privileged access using Windows PowerShell |
| Implement Just-Enough-Administration (JEA) | -This objective may include but is not limited to: Enable a JEA solution on Windows Server 2016; create and configure session configuration files; create and configure role capability files; create a JEA endpoint; connect to a JEA endpoint on a server for administration; view logs; download WMF 5.1 to a Windows Server 2008 R2; configure a JEA endpoint on a server using Desired State Configuration (DSC) |
| Implement Privileged Access Workstations (PAWs) and User Rights Assignments | -This objective may include but is not limited to: Implement a PAWS solution; configure User Rights Assignment group policies; configure security options settings in Group Policy; enable and configure Remote Credential Guard for remote desktop access; Implement an Enhanced Security Administrative Environment (ESAE) administrative forest design approach; Determine usage scenarios and requirements for implementing ESAE forest design architecture to create a dedicated administrative forest |
| Implement Local Administrator Password Solution (LAPS) | -This objective may include but is not limited to: Install and configure the LAPS tool; secure local administrator passwords using LAPS; manage password parameters and properties using LAPS |
Implement Threat Detection Solutions (15-20%) | |
| Configure advanced audit policies | -This objective may include but is not limited to: Determine the differences and usage scenarios for using local audit policies and advanced auditing policies; implement auditing using Group Policy and AuditPol.exe; implement auditing using Windows PowerShell; create expression-based audit policies; configure the Audit PNP Activity policy; configure the Audit Group Membership policy; enable and configure Module, Script Block, and Transcription logging in Windows PowerShell |
| Install and configure Microsoft Advanced Threat Analytics (ATA) | -This objective may include but is not limited to: Determine usage scenarios for ATA; determine deployment requirements for ATA; install and configure ATA Gateway on a dedicated server; install and configure ATA Lightweight Gateway directly on a domain controller; configure alerts in ATA Center when suspicious activity is detected; review and edit suspicious activities on the attack time line |
| Determine threat detection solutions using Operations Management Suite (OMS) | -This objective may include but is not limited to: Determine usage and deployment scenarios for OMS; determine security and auditing functions available for use; determine Log Analytics usage scenarios |
Implement Workload-Specific Security (5-10%) | |
| Secure application development and server workload infrastructure | -This objective may include but is not limited to: Determine usage scenarios, supported server workloads, and requirements for deployments; determine usage scenarios and requirements for Windows Server and Hyper-V containers; install and configure containers |
| Implement a secure file services infrastructure and Dynamic Access Control (DAC) | -This objective may include but is not limited to: Install the File Server Resource Manager (FSRM) role service; configure quotas; configure file screens; configure storage reports; configure file management tasks; configure File Classification Infrastructure (FCI) using FSRM; implement work folders; configure file access auditing; configure user and device claim types; implement policy changes and staging; perform access-denied remediation; create and configure Central Access rules and policies; create and configure resource properties and lists |
Reference: https://www.microsoft.com/en-us/learning/exam-70-744.aspx
When it comes to 70-744 certification, all of us are very excited and have a lot words. Someone complains the difficulty of the actual test, someone says he has get stuck in one questions, even some people are confused about all of the 70-744 exam test. Actually, gaining the 70-744 certification can bring about considerable benefits. For example, having the 70-744 certification on your resume will give you additional credibility with employers and consulting clients, and a high salary & good personal reputation will come along with that. From the above, we can see how important the 70-744 certification is. Our life is deeply affected by the IT technology and 70-744 certification.
Now, we will recommend the most valid & best-related 70-744 exam study torrent for your preparation. No matter how much you are qualified or experienced, we are just here to assist you pass the 70-744 test with 100% results.
Safe investment-money back guarantee in case of failure
We commit that you will enjoy one year free update for MCSA: Windows Server 2016 70-744 exam dumps torrent after you purchase. That is to say you will grasp the latest information without spending extra money. If there is any update, our system will send an email attached with updated 70-744 exam training torrent to you automatically. In the unlikely even if you fail the 70-744 exam, we promise to give you full refund. The refund policy is very easy to carry out, you just need to send us an email attached with your scanned failure certification, then we will give you refund after confirming. We will refund your money to the same card that is used to make payment. Besides, if you have any questions, our 24/7 Customer Support are available for you.
Choose our 70-744 Securing Windows Server 2016 valid practice torrent, we guarantee you 100% passing.
Instant Download: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
Valid practice torrent for better study
First, we have built a strong and professional team devoting to the research of 70-744 valid practice torrent. The experts of the team are all with rich hands-on IT experience and ever work for the international IT corporations. The authority and validity of Microsoft 70-744 training torrent are the guarantee for all the IT candidates. Maybe, you ever heard that some vendors offer the cheap dumps with lots of useless questions & answers, you have to study really hard with extra number of worthless questions and even they can't promise you success in the exam. Here, 70-744 valid exam torrent will provide you with the best suitable dumps for you to study. Each questions & answers from MCSA: Windows Server 2016 70-744 exam study torrent are all refined and summarized from a large number of technical knowledge, chosen after analysis of lots of datum. We remove the old and useless questions which are no longer needed for the actual test, and add the latest question into the Microsoft 70-744 exam dumps torrent at the same time. So the high-quality and best validity of 70-744 training torrent can definitely contribute to your success.
What's more, our specially designed products like 70-744 free demo will provide the customer with the overview about our 70-744 dump torrent. We exclusively offer instant download 70-744 free sample questions & answers which can give right guidance for the candidates.
Related Exam
- 70-740J pdf dumps torrent
- 070-741-Deutsch pdf dumps torrent
- 070-744 pdf dumps torrent
- 070-744J pdf dumps torrent
- 70-744-Deutsch pdf dumps torrent
- 070-741 pdf dumps torrent
- 070-740-KR pdf dumps torrent
- 070-740 pdf dumps torrent
- 070-743-Deutsch pdf dumps torrent
- 070-743 pdf dumps torrent
- 70-744 pdf dumps torrent
Related Certifications
Over 79617+ Satisfied Customers
833 Customer ReviewsCustomers Feedback (* Some similar or old comments have been hidden.)
This 70-744 exam dump is the latest dump. I failed my exam with other dumps, but succeed with this exam dump. Great!
Stev
I was recommended to use Free4Torrent by my colleagues, who passed their exams before. Today,I also passed the 70-744 exam using your 70-744 dump. It was not that hard as I thought. Thank you!
Kenneth
Amazing exam practising software and exam guide for the 70-744 certification exam. I am so thankful to Free4Torrent for this amazing tool. Got 90% marks.
Otto
These 70-744 dumps are amazing they are very good if you want to pass the exam ASAP. With just a few days practice I aced the exam.
Gordon
70-744 exam guide are valid and you must study it,I have finished my 70-744 exam and passed it with a high scores. Good luck!
Clark
You guys are so kind that help me pass 70-744.
Prescott
I cleared my 70-744 exam with 98% marks. Only 2 diffrent questions came out of the paper. The 70-744 exam questions are still valid and worked for me. Thanks!
Sam
70-744 exam material is valid and it gave me shortcut to success. Thanks! I passed 70-744 exam yesterday.
Octavia
Certified MCSA: Windows Server 2016 certification is easy for me to get.
Hugh
Hi, guys, this 70-744 exam dump leads to the 70-744 certification directly. You can just rely on it.
Zebulon
What else needed if Free4Torrent 70-744 real exam questions and answers file is there to offer you best certification exam training in limited time. My all IT related friends and fellows can use this 70-744 real exam guide to pass their exam
Michell
Valid 70-744 practice questions from you.
Lester
I bought the 70-744 training materials to help me pass the exam, they did that for me, and in the process of learning, I also improved my ability.
Webb
I studied for the Microsoft 70-744 exam from notes and other study material. I wasn't satisfied with my preparation. A friend suggested Free4Torrent. Now I was able to score 93% marks.
Jodie
Quality and Value
Free4Torrent Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and Approved
We are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to Pass
If you prepare for the exams using our Free4Torrent testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before Buy
Free4Torrent offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
Here you can get the most valid and free IT exam torrent for your upcoming exam test. Our promise is to help you pass the exam successfully, get a higher salary and build a better life.