Microsoft Certified Solutions Expert (MCSE) Server 2016

Microsoft MESE 2016
Oct, 2019


The focus on the Securing Windows Server 2016 (70-744) certification exam is centered around Windows Server 2016 Security; such as hardening server environments, securing Virtual Machine infrastructure using Shielded and encryption supported VMs and Guarded Fabric. The exam is designed to target candidates who are IT Pros and infrastructure professionals that are tasked with configuring and securing Windows Server 2016 environments On-Premises and in Virtual Machine (VM) environments including both the Public and Private Cloud.
Skills Measured

Here is a high-level list of the skills and objectives measured on this exam. The percentages next to each of the high-level objectives represent the percentage of exam questions that will be targeted towards that specific


• Implement disk and file encryption (25-30%)
• Configure disk and file encryption
• Implement server patching and updating solutions
• Implement malware protection
• Protect credentials
• Create security baselines
• Secure a virtualization infrastructure (5-10%)
• Implement Guarded Fabric solutions
• Implement Shielded and encryption supported VMs
• Secure a network infrastructure (10-15%)
• Configure Windows Firewall
• Implement a software-defined Distributed Firewall
• Secure network traffic
• Manage privileged identities (25-30%)
• Implement an Enhanced Security Administrative Environment (ESAE) administrative forest design approach
• Implement the Just-in-Time (JIT) Administration
• Implement Just-Enough-Administration (JEA)
• Implement Privileged Access Workstations (PAWs) and User Rights Assignments
• Implement Local Administrator Password Solution (LAPS)
• Implement threat detection solutions (15-20%)
• Configure advanced audit policies
• Install and configure Microsoft Advanced Threat Analytics (ATA)
• Determine threat detection solutions using Operations Management Suite (OMS)
• Implement workload-specific security (5-10%)
• Secure application development and server workload infrastructure
• Implement a secure file services infrastructure and Dynamic Access Control (DAC)
• When studying for this exam, you’ll definitely want to look at the official exam page from Microsoft for the full list of exam objectives. You’ll need to be sure to study every one of them that will be measured on the exam.

Course Content

Total learning: 1 lesson Time: 4 weeks

70-744 Securing Windows Server 2016  0/1