Secure Windows Server on-premises and hybrid infrastructures — Microsoft Certified: Windows Server Hybrid Administrator Associate

Official references for this objective

• Microsoft — Enable hardware-based isolation for Microsoft Edge | Microsoft Learn

  Enterprise-managed mode also automatically redirects any browser requests to add nonenterprise domain(s) in the container.

• Microsoft — Configure the Group Policy settings for Microsoft Defender Application Guard | Microsoft Learn

  These settings, located at Computer Configuration\Administrative Templates\Network\Network Isolation , help you define and manage your organization's network boundaries.

• Microsoft — FAQ - Microsoft Defender Application Guard | Microsoft Learn

  WDAGUtilityAccount is used to sign in to the Application Guard container as a standard user with a random password. It's NOT a malicious account. It

• Microsoft — Install BitLocker on Windows Server | Microsoft Learn

  For all Windows Server editions, BitLocker isn't installed by default, but it can be installed using Server Manager or Windows PowerShell cmdlets.

• Microsoft — System requirements for Microsoft Defender Application Guard | Microsoft Learn

  MDAG is currently not officially supported on VMs and in VDI environments. However, for testing and automation purposes on non-production machines, you may enable MDAG

• Microsoft — Testing scenarios with Microsoft Defender Application Guard | Microsoft Learn

  Type wdagtool.exe cleanup RESET_PERSISTENCE_LAYER . The container environment is reset, including discarding all employee-generated data.