Course Outline
• Securing Windows Server User Accounts
- Configuring and managing user accounts to limit security threats across an organization.
- Applying Protected Users settings, policies, and authentication silos to protect highly privileged user accounts.
- Describing and configuring Windows Defender Credential Guard.
- Configuring Group Policy to block the use of NTLM for authentication.
• Exploring Hardening Windows Server
- Managing local administrator passwords using Local Administrator Password Solution.
- Limiting administrative access to Privileged Access Workstations (PAWs).
- Explaining how to secure domain controllers from being compromised.
- Describing how to use the Microsoft Security Compliance Toolkit to harden servers.
- Securing SMB traffic using SMB encryption.
• Learning Windows Server Update Management
- Describing the role of Windows Server Update Services (WSUS).
- Describing the WSUS update management process.
- Deploying updates with WSUS.
• Securing Windows Server DNS
- Describing split-horizon DNS and explaining how to implement it.
- Creating DNS policies.
- Implementing DNS policies.
- Describing the options for protecting the DNS server role.
- Implementing DNS security.
• Implementing Windows Server IaaS VM Network Security
- Implementing Network Security Groups (NSGs) with Windows Server IaaS VMs.
- Implementing adaptive network hardening.
- Implementing Azure Firewall.
- Implementing Windows Defender Firewall in Windows Server IaaS VMs.
- Choosing an appropriate filtering solution.
- Capturing network traffic with Network Watcher.
• Auditing the Security of Windows Server IaaS Virtual Machines
- Describing Azure Security Center.
- Enabling Azure Security Center in hybrid environments.
- Onboarding Windows Server computers to Azure Security Center.
- Implementing and assessing security policies.
- Describing Azure Sentinel.
- Implementing SIEM and SOAR.
- Protecting your resources with Azure Security Center.
• Managing Azure Updates
- Describing Azure updates.
- Enabling Update Management.
- Deploying updates.
- Reviewing an updated assessment.
- Managing updates for your Azure VMs.
• Creating & Implementing Application Allowlists with Adaptive Application Control
- Enabling Adaptive application controls.
- Implementing adaptive application control policies.
• Configuring BitLocker Disk Encryption for Windows IaaS Virtual Machines
- Describing Azure Disk Encryption.
- Configuring Key Vault to support Azure Disk Encryption.
- Explaining how to encrypt Azure IaaS VM hard disks.
- Backing up and recovering encrypted data from IaaS VM hard disks.
• Implementing Change Tracking & File Integrity Monitoring for Windows IaaS VMs
- Implementing Change Tracking and Inventory.
- Managing Change Tracking and Inventory.
- Managing tracked files.
- Implementing File Integrity Monitoring.
- Selecting and monitoring entities.
- Using File Integrity Monitoring.
• Getting Introduced to Cluster Shared Volumes
- Describing the functionality of CSV.
- Describing the architecture and components of CSV.
- Implementing CSV.
• Implementing Windows Server Failover Clustering
- Describing Windows Server failover clustering.
- Implementing Windows Server failover clustering.
- Managing Windows Server failover clustering.
- Implementing stretch clusters.
- Describing cluster sets.
• Implementing High Availability of Windows Server VMs
- Describing the Hyper-V high availability options.
- Describing Hyper-V VMs load balancing.
- Implementing Hyper-V VMs live migration.
- Implementing Hyper-V VMs storage migration.
• Implementing Windows Server File Server High Availability
- Providing a high-level overview of Windows Server File Server high-availability options.
- Describing the characteristics of, and high-level implementation steps for Cluster Shared Volumes (CSV).
- Describing the characteristics of, and high-level implementation steps for Scale-Out File Server (SOFS).
- Describing the characteristics of, and high-level implementation steps for Storage Replica.
• Implementing Scale & High Availability with Windows Server VM
- Describing virtual machine scale sets.
- Implementing scaling.
- Implementing load-balancing virtual machines.
- Implementing Azure Site Recovery.
• Implementing Hyper-V Replica
- Describing Hyper-V Replica, pre-requisites for its use, and its high-level architecture and components.
- Describing Hyper-V Replica usage scenarios, available replication settings, and security considerations.
- Configuring Hyper-V Replica settings, health monitoring, and failover options.
- Implementing Hyper-V Replica.
- Describing extended replication.
- Describing Site Recovery.
- Implementing Site Recovery.
• Protecting Your On-premises Infrastructure from Disasters with Azure Site Recovery
- Identifying the features and protection capabilities Azure Site Recovery provides to on-premises infrastructure.
- Identifying the requirements for enabling the protection of on-premises infrastructure.
• Implementing Hybrid Backup & Recovery with Windows Server IaaS
- Describing Azure Backup.
- Implementing Recovery Vaults.
- Implementing Azure Backup policies.
- Recovering Windows IaaS VMs.
- Performing file and folder recovery.
- Performing backup and recovery of on-premises workloads.
- Explaining how to manage Azure VM backups with Azure Backup.
• Protecting Your Azure Infrastructure with Azure Site Recovery
- Protecting Azure virtual machines with Azure Site Recovery.
- Running a disaster recovery drill to validate protection.
- Failover and failback your virtual machines.
• Protecting Your Virtual Machines Using Azure Backup
- Identifying the scenarios for which Azure Backup provides backup and restore capabilities.
- Backing up and restoring an Azure virtual machine.
• Learning the Active Directory Domain Services Migration
- Comparing upgrading an AD DS forest and migrating to a new AD DS forest.
- Describing how to upgrade an existing AD DS forest.
- Describing how to migrate to a new AD DS forest.
- Describing Active Directory Migration Tool (ADMT).
• Migrating File Server Workloads Using a Storage Migration Service
- Describing Storage Migration Service and its usage scenarios.
- Identifying the requirements for using Storage Migration Service.
- Describing how to migrate a server with storage migration.
- Listing the considerations for using Storage Migration Service.
• Migrating Windows Server Roles
- Describing the Windows Server Migration Tools.
- Using the migration tools to migrate specific Windows Server roles.
• Migrating On-premises Windows Server Instances to Azure IaaS Virtual Machines
- Planning your migration.
- Describing Azure Migrate.
- Migrating server workloads using Windows Server Migration Tools.
- Assessing physical servers with Azure Migrate.
- Migrating on-premises servers to Azure.
• Upgrading/Migrating Windows Server IaaS Virtual Machines
- Describing Windows Server IaaS migration.
- Explaining how to migrate workloads using Windows Server Migration tools.
- Describing storage migration.
- Migrating file servers using the Storage Migration Service.
• Containerizing & Migrating ASP.NET Applications to Azure App Service
- Discovering and containerizing your ASP.NET app running on Windows machines using Azure Migrate: App Containerization.
- Building a container image for your ASP.NET application.
- Deploying your containerized application to Azure App Service using Azure Migrate: App Containerization.
• Monitoring Windows Server Performance
- Using built-in tools in Windows Server to monitor server performance.
- Understanding the fundamentals of server performance tuning.
• Managing & Monitoring Windows Server Event Logs
- Describing event logs.
- Using Server Manager and Windows Admin Center to review event logs.
- Implementing custom views.
- Configuring an event subscription.
• Implementing Windows Server Auditing & Diagnostics
- Auditing Windows Server events.
- Configuring Windows Server to record diagnostic information.
• Troubleshooting Active Directory
- Recovering the AD DS database, objects in AD DS, and SYSVOL.
- Troubleshooting AD DS replication.
- Troubleshooting Hybrid authentication issues.
• Monitoring Windows Server IaaS Virtual Machines & Hybrid Instances
- Enabling Azure Monitor for VMs.
- Monitoring an Azure VM with Azure Monitor.
- Enabling Azure Monitor in hybrid scenarios.
- Collecting data from a Windows computer in a hybrid environment.
- Integrating Azure Monitor with Microsoft Operations Manager.
• Monitoring Your Azure Virtual Machines with Azure Monitor
- Understanding which monitoring data you need to collect from your VM.
- Enabling and viewing recommended alerts and diagnostics.
- Using Azure Monitor to collect and analyze VM host metrics data.
- Using Azure Monitor Agent to collect VM client performance metrics and event logs.
• Troubleshooting On-premises & Hybrid Networking
- Diagnosing DHCP and DNS problems in on-premises contexts.
- Diagnosing IP configuration and routing problems.
- Implementing Packet Monitor to help diagnose network problems.
- Using Azure Network Watcher to troubleshoot Microsoft Azure virtual networks.
• Troubleshooting Windows Server Virtual Machines in Azure
- Troubleshooting VM deployment and extension issues.
- Troubleshooting VM startup and performance issues.
- Troubleshooting VM storage and encryption issues.
- Troubleshooting connectivity to VMs.