Implement security for servers and virtual machines - Part 1

As organizations continue to host critical workloads in the cloud, virtual machine security goes beyond simply protecting the operating system. Security teams must also protect data stored on VM disks, defend the boot process against advanced threats, reduce administrative exposure, and ensure that remote access is implemented securely.

This session will explore three important areas of Azure virtual machine security:

• Disk encryption
• Trusted Launch
• Secure administrative access with Azure Bastion

About the Session

Azure virtual machines often host business-critical applications, databases, management systems, development environments, and hybrid workloads.
A compromised virtual machine can expose sensitive information, credentials, workloads, or downstream systems. For this reason, Cloud and AI Security Engineers must understand how to secure VMs at multiple layers.

During this session, participants will learn how to protect Azure virtual machines by securing:

• Data at rest
• The VM boot process
• Administrative access
• Security configuration consistency
• Compliance across VM deployments

The session will combine practical security concepts with Microsoft-native technologies that can be applied in real-world Azure environments.

What You Will Learn

By the end of the session, participants should understand how to:

• Compare Azure virtual machine disk-encryption options
• Select an appropriate encryption approach for different workloads
• Configure encryption at host
• Use customer-managed keys with Azure Key Vault and Disk Encryption Sets
• Understand confidential disk encryption
• Enforce VM disk-encryption requirements using Azure Policy
• Explain how Trusted Launch protects the virtual machine boot process
• Configure Secure Boot and vTPM
• Use integrity monitoring to identify potential boot-level threats
• Enable Trusted Launch on supported Azure VMs
• Enforce Trusted Launch through Azure Policy
• Understand the security risks associated with exposing RDP and SSH ports
• Plan and deploy Azure Bastion
• Provide secure administrative access to virtual machines without directly exposing management ports
• Apply defense-in-depth principles to Azure virtual machines

Who Should Attend?

This session is ideal for:

• Participants in the Cloud and AI Security Bootcamp
• Cloud Security Engineers
• Azure Security Engineers
• Azure Administrators
• Infrastructure Engineers
• Cloud Architects
• Security Architects
• DevSecOps Engineers
• SOC and Security Operations professionals
• Identity and Access Management professionals
• Professionals responsible for Azure governance
• Professionals preparing for the SC-500 certification
• Anyone interested in securing servers and virtual machines in Microsoft Azure

Why You Should Attend

Virtual machines remain a critical part of many enterprise cloud architectures, including environments supporting applications, infrastructure services, databases, and AI workloads.

Securing them requires more than antivirus or firewall rules.

Cloud security professionals must understand:

• How VM disks are protected
• How the boot process can be trusted
• How administrative access should be secured
• How security requirements can be enforced consistently at scale

This session will help participants understand how Azure Disk Encryption capabilities, Trusted Launch, Azure Bastion, Azure Key Vault, and Azure Policy can work together to improve the security posture of Azure virtual machines.

Whether you are building Azure environments, managing infrastructure, designing security architectures, or preparing for the SC-500 Cloud and AI Security Engineer certification, this session will provide practical knowledge you can apply in real-world environments.

Come ready to learn, ask questions, and strengthen your Azure virtual machine security skills.

Learn. Connect. Secure the Cloud