Learn about Microsoft Defender for Cloud and how to onboard Windows Server computers to the Microsoft Defender for Cloud Service. Also learn about Microsoft Sentinel, security information and event management (SIEM), and security orchestration, automation, and response (SOAR).
After completing this module, you'll be able to:
- Describe Microsoft Defender for Cloud.
- Enable Microsoft Defender for Cloud in hybrid environments.
- Onboard Windows Server computers to Microsoft Defender for Cloud.
- Implement and assess security policies.
- Describe Microsoft Sentinel.
- Implement SIEM and SOAR.
- Protect your resources with Microsoft Defender for Cloud.
You'll be able to enable Azure Update Management, deploy updates, review an update assessment, and manage updates for your Azure VMs.
After completing this module, you will be able to:
- Describe Azure updates.
- Enable Update Management.
- Deploy updates.
- Review an update assessment.
- Manage updates for your Azure VMs.
Configure BitLocker disk encryption for Windows IaaS Virtual Machines
After completing this module, you'll be able to:
- Describe Azure Disk Encryption.
- Configure Key Vault to support Azure Disk Encryption.
- Explain how to encrypt Azure IaaS VM hard disks.
- Back up and recover encrypted data from IaaS VM hard disks.
Implement change tracking and file integrity monitoring for Windows IaaS VMs
After completing this module, you'll be able to:
- Implement Change Tracking and Inventory
- Manage Change Tracking and Inventory
- Manage tracked files
- Implement File Integrity Monitoring
- Select and monitor entities
- Use File Integrity Monitoring
Implement Windows Server IaaS VM network security
After completing this module, you'll be able to:
- Implement Network Security Groups (NSGs) with Windows Server IaaS VMs.
- Implement adaptive network hardening.
- Implement Azure Firewall.
- Implement Windows Defender Firewall in Windows Server IaaS VMs.
- Choose an appropriate filtering solution.
- Capture network traffic with Network Watcher.

Syllabus

Audit the security of Windows Server IaaS Virtual Machines
- Introduction
- Describe Microsoft Defender for Cloud
- Enable Microsoft Defender for Cloud in hybrid environments
- Implement and assess security policies
- Protect your resources with Microsoft Defender for Cloud
- Implement Microsoft Sentinel
- Module assessment
- Summary
Manage Azure updates
- Introduction
- Describe update management
- Enable update management
- Deploy updates
- View update assessments
- Manage updates for your Azure Virtual Machines
- Module assessment
- Summary
Configure BitLocker disk encryption for Windows IaaS Virtual Machines
- Introduction
- Describe Azure Disk Encryption and server-side encryption
- Configure Key Vault for Azure Disk Encryption
- Encrypt Azure IaaS Virtual Machine hard disks
- Back up and recover data from encrypted disks
- Create and encrypt a Windows Virtual Machine
- Module assessment
- Summary
Implement change tracking and file integrity monitoring for Windows IaaS VMs
- Introduction
- Implement Change Tracking and Inventory
- Manage Change Tracking and Inventory
- Manage tracked files
- Implement File Integrity Monitoring
- Select and monitor entities
- Use File Integrity Monitoring
- Module assessment
- Summary
Implement Windows Server IaaS VM network security
- Introduction
- Implement network security groups and Windows IaaS VMs
- Implement Azure Firewall and Windows IaaS VMs
- Implement Windows Firewall with Windows Server IaaS VMs
- Choose the appropriate filtering solution
- Deploy and configure Azure firewall using the Azure portal
- Capture network traffic with network watcher
- Log network traffic to and from a VM using the Azure portal
- Module assessment
- Summary