Section 2: Platform Protection

Implement Platform Protection (35-40%)
Implement Network Security

Configure virtual network connectivity; configure Network Security Groups (NSGs); create and configure Microsoft Azure firewall; create and configure application security groups; configure remote access management


Implement Host Security

Configure endpoint security within the VM; configure VM security; harden VMs in Microsoft Azure; configure system updates for VMs in Microsoft Azure; configure baseline


Configure Container Security

Configure network; configure authentication; configure container isolation; configure AKS security; configure container registry; configure container instance security; implement vulnerability management



Implement Microsoft Azure Resource Management Security

Create Microsoft Azure resource locks; manage resource group security; configure Microsoft Azure policies; configure custom RBAC roles; configure subscription and resource permissions

Download the pdf here