Summary
In this chapter, we learned how to secure Windows Server networking on workloads, adding security to the communications layer for shared workloads. We also learned how to configure and manage Windows Defender Firewall, how to plan for and configure domain isolation, and how to implement connection security and authentication request rules for your Windows servers in a hybrid environment.
In the next chapter, we will learn how to properly secure our Windows Server storage to help mitigate data theft, data exposure, and ransomware. We will work through exercises that reinforce skills surrounding the management and configuration of Windows BitLocker drive encryption for storage volumes, enable storage encryption on Infrastructure-as-a-Service (IaaS) VMs using Azure Disk Encryption, and how to manage and monitor disk encryption keys using Azure Key Vault (AKV) for IaaS VM and VM scale sets.
