DSE security knowledge hub

Networks & Infrastructure
Knowledge

Page 125 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Networks & Infrastructure knowledge center

Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.

Start with the cornerstone guide
DSE post stream

Networks & Infrastructure

1,594 articles
DSE visual briefNetworks & infrastructure

Validate DNS Encryption using DNS over HTTPS in Windows and Windows Server with AD/DNS evidence

Microsoft states: “Traditional DNS uses unencrypted UDP or TCP messages on port 53, which exposes DNS traffic to passive monitoring, traffic analysis, and active manipulation by attackers.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefNetworks & infrastructure

Stage What is DNSSEC on DNS Server in Windows Server? with AD/DNS rollback checks

Microsoft states: “Domain Name System Security Extensions (DNSSEC) is a suite of extensions that add security to the Domain Name System (DNS) protocol by enabling DNS responses to be validated.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefIdentity & cloud

Validate What is Active Directory Certificate Services in Windows Server? with AD/DNS evidence

Microsoft states: “Active Directory Certificate Services (AD CS) is a Windows Server role for issuing and managing public key infrastructure (PKI) certificates used in secure communication and authentication protocols.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefNetworks & infrastructure

Stage Install a policy module with the Network Device Enrollment Service in Windows Server with AD/DNS rollback checks

Microsoft states: “Network Device Enrollment Service(NDES) for Active Directory Certificate Services support a policy module that provides extra security for the Simple Certificate Enrollment Protocol (SCEP).”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer