- Learn how to harden the security configuration of your Windows Server operating system environment. Secure administrative access to Privileged Access Workstations (PAWs), apply security baselines, and secure domain controllers and SMB traffic.
After completing this module, you will be able to:
Manage local administrator passwords using Local Administrator Password Solution
Limit administrative access to Privileged Access Workstations (PAWs)
Explain how to secure domain controllers from being compromised
Describe how to use the Microsoft Security Compliance Toolkit to harden servers
Secure SMB traffic using SMB encryption
- This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.
After this module, you should be able to:
Describe Microsoft Defender for Endpoint.
Describe key capabilities of Microsoft Defender for Endpoint.
Describe Microsoft Defender Application Guard.
Describe Microsoft Defender Exploit Guard.
Describe Windows Defender System Guard.
- This module explains the built-in security features of Windows clients and how to implement them using policies.
After this module, you should be able to:
- Describe Windows Security capabilities
- Describe Windows Defender Credential Guard
- Manage Microsoft Defender Antivirus
- Manage Windows Defender Firewall
- Manage Windows Defender Firewall with Advanced Security
- This module focuses on maintaining security in an Active Directory environment. It covers things from permissions management to authentication methods to identifying problematic accounts.
By the end of this module, you'll be able to:
Configure user account rights.
Configure user account rights to restrict access.
Delegate permissions in Active Directory.
Protect User Accounts with the Protected Users group.
Describe Windows Defender Credential Guard.
Block Windows NTLM authentication.
Locate problematic accounts.
- Protect your Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. Learn how to limit authentication scope and remediate potentially insecure accounts.
After completing this module, you'll be able to:
- Configure and manage user accounts to limit security threats across an organization
- Apply Protected Users settings, policies, and authentication silos to protect highly privileged user accounts
- Describe and configure Windows Defender Credential Guard
- Configure Group Policy to block the use of NTLM for authentication
- This module focuses on effectively managing security controls in Microsoft Entra ID by securing identities, authentication, and authorization to protect users, groups, and external identities against threats while ensuring secure and seamless access to resources.
By the end of this module, participants will be able to:
Secure user identities in Microsoft Entra ID by implementing strong authentication and access management controls.
Protect groups and access management by enforcing security measures to prevent unauthorized changes or misuse.
Manage external identities securely by defining policies that ensure confidentiality, integrity, and proper access control.
Implement Microsoft Entra ID Protection to detect, investigate, and mitigate identity-related security threats.
Apply Conditional Access policies to enforce security controls based on user behavior, device compliance, and contextual risks.
- Learn security monitoring and governance with Microsoft Defender for Cloud, Azure Policy, resource locks, Microsoft Defender for Identity, and GitHub Advanced Security integration for comprehensive DevSecOps protection.
By the end of this module, you're able to:
Implement pipeline security best practices and secure DevOps workflows.
Configure Microsoft Defender for Cloud for threat protection and compliance monitoring.
Create and manage Azure policies for governance and compliance enforcement.
Understand policy initiatives, resource locks, and governance frameworks.
Deploy Microsoft Defender for Identity threat detection.
Integrate GitHub Advanced Security with Microsoft Defender for Cloud.
Configure GitHub Advanced Security features including code scanning, secret scanning, and dependency scanning.
