Windows Server Courses and Certifications

Secure DNS

The DNS client in Windows Server 2022 supports DNS over HTTPS (DoH), which encrypts DNS queries using the HTTPS protocol. This keeps your traffic as private as possible and prevents eavesdropping and DNS manipulation.

AES-256 encryption

SMB now supports AES-256-GCM and AES-256-CCM encryption. This provides a very high level of security when two servers communicate.

UEFI Secure Boot

This is a security standard that protects your servers against malicious rootkits. Secure Boot ensures that the server only starts if the firmware and software are trusted by the hardware vendor. During startup, the digital signature of every boot component is checked, including firmware drivers and the OS. The boot process continues only if the signature is valid.

SMB compression

With SMB traffic compression, users and apps no longer need to zip files that are sent over slow or congested networks.

Hardware root-of-trust 

Support for TPM 2.0 is used to ensure that a server has booted with legitimate code and that programs run securely. BitLocker, for example, uses this functionality.

HTTPS and TLS 1.3 by default

When two Windows servers, or a server and a client (Windows 10 and 11), communicate, they automatically use HTTPS and the latest TLS 1.3 security. This eliminates outdated encryption algorithms, improves security compared to older versions and encrypts as much of the handshake as possible.