Microsoft · AZ-802
Securing the operating system
AZ-802 · Lesson 17 of 21 · 2:23:40
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-802 exam (Administering Windows Server). In this lesson: exploit protection and App Control for Business in audit mode first, Credential Guard on by default on Windows Server 2025 member servers, Microsoft Defender SmartScreen, Group Policy security settings, OSConfig security baselines with drift control, Windows LAPS in AD DS or Microsoft Entra ID, Defender for Servers plans, and the Windows firewall with connection security rules. Includes three original practice questions.
Preview the topics
- Contoso’s administrators keep changing security settings on new Windows Server 2025 member servers, and the team wants the recommended baseline restored automatically. What should it use?
- Contoso wants unique local administrator passwords on its domain-joined servers, stored encrypted in AD DS, with a password history. Its domain runs at the Windows Server 2016 functional level. What should the team do?
- Contoso’s finance servers must only accept traffic from computers that authenticate as domain members, and that traffic must be encrypted. What should the team configure?