Secure Windows Server Storage

We will now move into the final chapter of this section by covering security and encryption for Windows Server storage. Continuing the security theme, we will now discover how to properly secure our Windows Server storage to help protect against data theft, exposure, and ransomware. We will discuss and complete exercises surrounding planning, managing, and configuring security for Windows Infrastructure-as-a-Service (IaaS) VMs using Network Security Groups (NSGs) and Application Security Groups (ASGs), the Azure Storage firewall, and Windows BitLocker Drive Encryption (BitLocker).

This chapter will include exercises on how to manage and recover BitLocker encrypted volumes, enable storage encryption utilizing Azure Disk Encryption (ADE), and successfully manage and secure disk encryption keys using Azure Key Vault for IaaS VMs and VM scale sets.

In this chapter, we will cover the following topics:

• Introduction to NSGs, ASGs, service tags,...