The Microsoft Securing Windows Server 2016 certification has a strong reputation for a reason — the 070-744 exam tests applied skills, not memorized definitions. Candidates around the world use Actual4Exams practice questions to close knowledge gaps before test day.
Microsoft 070-744 Exam Overview:
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Securing Windows Server 2016 |
| Exam Number: | 70-744 |
| Exam Duration: | 120 minutes |
| Certificate Validity Period: | Retired January 31, 2021; active MCSE valid for 3 years |
| Exam Price: | USD $165 |
| Passing Score: | 700 / 1000 |
| Exam Format: | Multiple choice, Simulation, Build list, Case study, Drag-and-drop |
| Related Certifications: | MCSA: Windows Server 2016 MCSE: Cloud Platform and Infrastructure |
| Real Exam Qty: | 40-60 |
| Available Languages: | Spanish, German, Portuguese (Brazil), Chinese (Simplified), English, Japanese, French, Chinese (Traditional) |
| Recommended Training: | Microsoft Learn Self-Paced Learning Microsoft Official Course 20744 |
| Exam Registration: | Microsoft Exam 70-744 Page Pearson VUE Registration |
| Sample Questions: |  |
| Exam Way: | Proctored onsite or online via Pearson VUE (retired) |
| Pre Condition: | Recommended: MCSA: Windows Server 2016 certification or equivalent knowledge of 70-740, 70-741, 70-742; 2+ years of server administration experience |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/exams/70-744/ |
Microsoft 070-744 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Implement Workload-Specific Security | 5-10 | - Implement FSRM and File Classification Infrastructure - Secure containers and application workloads - Secure file services and Dynamic Access Control |
| Topic 2: Implement Threat Detection Solutions | 15-20 | - Use Operations Management Suite (OMS) security solutions - Configure auditing and log analysis - Identify and respond to security events - Deploy Microsoft Advanced Threat Analytics (ATA) |
| Topic 3: Secure a Virtualization Infrastructure | 5-10 | - Configure Guarded Fabric - Implement Shielded and encryption-supported VMs - Secure VM storage and networking |
| Topic 4: Secure a Network Infrastructure | 10-15 | - Secure network traffic and access - Configure Windows Firewall and IPsec - Implement advanced DNS and DHCP security |
| Topic 5: Manage Privileged Identities | 25-30 | - Deploy Privileged Access Workstations (PAWs) - Secure Active Directory and AD FS - Implement Just-In-Time (JIT) administration - Implement Just-Enough Administration (JEA) - Configure Local Administrator Password Solution (LAPS) |
| Topic 6: Implement Server Hardening Solutions | 25-30 | - Protect credentials - Create security baselines - Configure disk and file encryption - Implement malware protection |
Common Questions About the Microsoft 070-744 Exam
The 070-744 exam, officially known as Microsoft Securing Windows Server 2016, is the Microsoft test that leads to the MCSE: Core Infrastructure / MCSE: Cloud Platform and Infrastructure certification at the Professional level. Passing it validates the skills employers expect from a certified professional. It is also associated with related credentials such as MCSA: Windows Server 2016, MCSE: Cloud Platform and Infrastructure.
The 070-744 exam contains 40-60 questions, and you have 120 minutes to complete them. Work out your per-question pace before test day, and flag slow items instead of stalling on them — time pressure, not knowledge, sinks many first attempts. Timed mock exams in the Actual4Exams test engines are the most reliable way to build that rhythm.
The passing score for the 070-744 exam is 700 / 1000, and the official registration fee is USD $165. If you miss the mark, a retake means paying the full fee again, so book your seat only when you are ready. A practical benchmark: score consistently above the passing line on timed practice tests before scheduling the real exam.
Recommended: MCSA: Windows Server 2016 certification or equivalent knowledge of 70-740, 70-741, 70-742; 2+ years of server administration experience
Entry requirements can change, so confirm the latest conditions on the official exam page: https://learn.microsoft.com/en-us/credentials/certifications/exams/70-744/.
You can book the 070-744 exam through the official registration channels below:
Exam delivery: Proctored onsite or online via Pearson VUE (retired). Seats at popular test centers fill quickly, so schedule early once your preparation is on track.
Microsoft recommends the following training options for Microsoft Securing Windows Server 2016 candidates:
Pair any course with the 245 practice questions from Actual4Exams to measure how ready you really are before paying the exam fee.
Yes. A free PDF demo of the Microsoft Securing Windows Server 2016 questions is available, so you can check the question style and answer quality before you pay. Every purchase also includes 365 days of free updates, and if the product expires you can renew the update service at a 50% discount from your member zone.
If you take the corresponding 070-744 exam within 60 days of purchase and do not pass, you can apply for a full refund under the 100% Money Back Guarantee: submit a scan of your enrollment slip and your official Score Report (PDF) within 2 days of the exam date, and the claim is processed within 7 days. Attempts made within 3 days of purchase, downloads without an actual exam attempt, free materials, and expired orders are not eligible, and the candidate name must match the payer name. Prefer new material instead of a refund? You can exchange your purchase for two free products of equal value and keep the update service on your original product. As for delivery, the files are available for instant download and are also emailed to you within one minute of payment — if nothing arrives within 2 hours, contact customer service. There is no limit on how many computers you can install the product on.
The official Microsoft Securing Windows Server 2016 outline is organized into 6 domains. The first three are:
- Implement Threat Detection Solutions — 15-20 of the exam
- Manage Privileged Identities — 25-30 of the exam
- Implement Server Hardening Solutions — 25-30 of the exam
See the complete exam topics section above for the full outline and the weighting of every domain.
Microsoft Securing Windows Server 2016 Sample Questions:
You have several virtual machines that run in a hosted data center on Hyper-V hosts.
The hosting provider recently updated the service offering in its Hyper-V environment to include a new Host Guardian Service (HSG).
You plan to use the Shielding Data File Wizard to create a data file that will include password information and an RDP file. The file will be used to create new shielded virtual machines in the fabric of the hosting provider.
What do you require from the hosting provider to complete the wizard?
- A. an XML file that contains virtual machine configuration data from the Hyper-V hosts
- B. a CER file that contains a certificate from the provider
- C. an XML file that contains the names of all the Hyper-V hosts in the fabric.
- D. an XML file that contains guardian metadata
Explanation: Only visible for Actual4Exams members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 is configured as a domain controller.
You configure Server1 as a Just Enough Administration (JEA) endpoint You configure the required JEA rights for a user named User1.
You need to tell User1 how to manage Active Directory objects from Server2.
What should you tell User1 to do first on Server2?
- A. From a command prompt, run ntdsutil.exe.
- B. From Windows PowerShell run the Enter-PSSession cmdlet.
- C. From Windows PowerShell, run the Import-Module cmdlet.
- D. Install the management consoles for Active Directory, and then launch Active Directory Users and Computer.
Explanation: Only visible for Actual4Exams members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com.
The domain contains four global groups named Group].., Group2, Group3, and Group4.A user named User1 is a member of Group3.
You have an organizational unit (OU) named OU1 that contains computer accounts.
A Group Policy object (GPO) named GPO1 is linked to OU1. OU1 contains a computer account named Computer1.
GPO1 has the User Rights Assignment configured as shown in the following table:
You need to ensure that User1 can access the shares on Computer1. What should you do?
- A. Modify the Deny log on locally user right
- B. Modify the Deny access to this computer from the network user right.
- C. Modify the membership of Group1.
- D. In GPO1, modify the Access this computer from the network user right
Explanation: Only visible for Actual4Exams members. You can sign-up / login (it's free).
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. You implement the Local Administrator Password Solution (LAPS) in the domain. You enable auditing for LAPS. You need to identify any users who read the password for Server1. Which log should you review?
- A. Applications and Services Logs\Directory Service on the domain controllers
- B. Windows Logs\Application on Server1
- C. Windows Logs\System on Server1
- D. Windows Logs\Security on the domain controllers
Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows Server 2012.
The forest contains 20 member servers that are configured as file servers. All domain controllers run Windows Server 2016.
You create a new forest named contosoadmin.com.
You need to use the Enhanced Security Administrative Environment (ESAE) approach for the administration of the resources in contoso.com.
Which two actions should you perform? Each correct answer presents part of the solution.
- A. From the properties of the trust, enable selective authentication.
- B. Configure contosoadmin.com to trust contoso.com.
- C. From the properties of the trust, enable forest-wide authentication.
- D. Configure a two-way trust between both forests.
- E. Configure contoso.com to trust contosoadmin.com.
Explanation: Only visible for Actual4Exams members. You can sign-up / login (it's free).
No help, Full refund!
Actual4Exams confidently stands behind all its offerings by giving Unconditional "No help, Full refund" Guarantee. Since the time our operations started we have never seen people report failure in the Microsoft 070-744 exam after using our products. With this feedback we can assure you of the benefits that you will get from our products and the high probability of clearing the 070-744 exam.
We still understand the effort, time, and money you will invest in preparing for your certification exam, which makes failure in the Microsoft 070-744 exam really painful and disappointing. Although we cannot reduce your pain and disappointment but we can certainly share with you the financial loss.
This means that if due to any reason you are not able to pass the 070-744 actual exam even after using our product, we will reimburse the full amount you spent on our products. you just need to mail us your score report along with your account information to address listed below within 7 days after your unqualified certificate came out.
