Book Image

Installing and Configuring Windows 10: 70-698 Exam Guide

Book Image

Installing and Configuring Windows 10: 70-698 Exam Guide

Overview of this book

The Installing and Configuring Windows 10: 70-698 Exam Guide is designed to confirm what you already know, while also updating your knowledge of Windows 10. With its easy-to-follow guidance, you will quickly learn the user interface and discover steps to work efficiently in Windows 10 to rule out delays and obstacles. This book begins by covering various ways of installing Windows 10, followed by instructions on post-installation tasks. You will learn about the deployment of Windows 10 in Enterprise and also see how to configure networking in Windows 10. You’ll understand how to leverage Disk Management and Windows PowerShell to configure disks, volumes, and file system options. As you progress through the chapters, you will be able to set up remote management in Windows 10 and learn more about Windows update usage, behavior, and settings. You will also gain insights that will help you monitor and manage data recovery and explore how to configure authentication, authorization, and advanced management tools in Windows 10. By the end of this book, you will be equipped with enough knowledge to take the 70-698 exam and explore different study methods to improve your chances of passing the exam with ease.
Table of Contents (25 chapters)
Title Page
Copyright and Credits
Dedication
About Packt
Contributors
Preface
Index

Configuring Device Guard


Windows Defender Device Guard is another layer of security in the so-called defense in depth strategy. It is a combination of the enterprise hardware and software security features so that it can mitigate threats coming from malicious software (malware). With that being said, Device Guard only allows the execution of trusted applications, and trusted applications are considered to be applications that are signeddigitally. Thus, to verify an application's digital signature, Device Guard uses virtualization-based security. In that way, if an attacker manages to get control of your Windows 10 device, Device Guard will lock down your device. Once locked, your device will only run trusted applications that you have previously defined in your code integrity policies. No untrusted apps are permitted to run. 

Adding Guarded Host

To add the Guarded Host feature to your Windows 10 computer using Turn Windows features on or off, complete the following steps:

  1. Click the search box...