Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
Microsoft · SC-500

Securing servers and VMs

SC-500 · Lesson 11 of 15 · 1:08:37

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the SC-500 exam (Microsoft Certified: Cloud and AI Security Engineer Associate). In this lesson: encryption at host and the retirement of Azure Disk Encryption, Trusted Launch and boot integrity, Azure Bastion and just-in-time access, Defender for Servers plans, and Azure Arc and Machine Configuration. Includes three original practice questions.

Preview the topics
  • Admins need remote desktop to a VM a few times a month, and the port must stay closed the rest of the time. What fits?
  • The team wants vulnerability and secret scanning of VM disks without installing anything, plus file integrity monitoring. Which plan fits?
  • A company must enforce the same operating system security settings on Azure VMs, and on servers in its own datacenter. What fits?