▪ Understanding user rights
▪ Computer and service accounts
▪ Protecting credentials
▪ Understanding privileged-access workstations and jump servers
▪ Deploying a local administrator-password solution 

▪ Understanding JEA
▪ Configuring and deploying JEA 

▪ Understanding ESAE forests
▪ Overview of MIM
▪ Implementing JIT and Privileged Access Management by using MIM

▪ Configuring and managing Windows Defender
▪ Using software restricting policies (SRPs) and AppLocker
▪ Configuring and using Device Guard
▪ Using and deploying the Enhanced Mitigation Experience Toolkit

▪ Overview of auditing
▪ Understanding advanced auditing
▪ Configuring Windows PowerShell auditing and logging

▪ Overview of Advanced Threat Analytics
▪ Understanding OMS 

▪ Overview of Guarded Fabric VMs
▪ Understanding shielded and encryption-supported VMs 

▪ Using Security Compliance Manager
▪ Introduction to Nano Server
▪ Understanding containers

▪ Planning and implementing encryption
▪ Planning and implementing BitLocker

▪ Introduction to FSRM
▪ Implementing classification management and file-management tasks
▪ Understanding Dynamic Access Control (DAC)

▪ Understanding Windows Firewall
▪ Software-defined distributed firewalls 

▪ Network-related security threats and connection-security rules
▪ Configuring advanced DNS settings
▪ Examining network traffic with Microsoft Message Analyzer
▪ Securing SMB traffic, and analysing SMB traffic 

▪ Overview of WSUS
▪ Deploying updates by using WSUS