Section 2: Platform Protection
Implement Platform Protection (35-40%)
Implement Network Security
Configure virtual network connectivity; configure Network Security Groups (NSGs); create and configure Microsoft Azure firewall; create and configure application security groups; configure remote access management
Implement Host Security
Configure endpoint security within the VM; configure VM security; harden VMs in Microsoft Azure; configure system updates for VMs in Microsoft Azure; configure baseline
Configure Container Security
Configure network; configure authentication; configure container isolation; configure AKS security; configure container registry; configure container instance security; implement vulnerability management
Implement Microsoft Azure Resource Management Security
Create Microsoft Azure resource locks; manage resource group security; configure Microsoft Azure policies; configure custom RBAC roles; configure subscription and resource permissions