Manage security posture by using Microsoft Defender for Cloud - Part 3

Modern cloud environments contain servers, storage, databases, APIs, and AI workloads that require different layers of protection. Microsoft Defender for Cloud provides workload-specific protection plans that can be enabled and managed at scale.

The session will also explore how Defender Vulnerability Management integrates with Defender for Servers to assess Azure VMs, identify vulnerabilities, prioritize findings, and apply remediation capabilities.

What You Will Learn

1. Enable and Configure Workload Protection Plans

Learn how to use Cloud Workload Protection Platform (CWPP) capabilities in Microsoft Defender for Cloud to protect different workload types.

Key areas include:

• Understanding the Defender for Cloud CWPP plan catalog
• Identifying the appropriate protection plan for different workloads
• Protecting servers, storage, databases, and AI workloads
• Understanding Defender for Servers Plan 1 vs. Plan 2
• Configuring Defender for Storage, including malware-scanning capabilities
• Configuring Defender for Databases
• Enabling protection plans through Azure Environment Settings
• Deploying protection plans at subscription or management-group scope
• Using Azure Policy to deploy plans at scale
• Verifying protection coverage using the Coverage workbook
• Understanding protection for AI Services and APIs

2. Configure Microsoft Defender Vulnerability Management

The second part focuses on vulnerability assessment and management for Azure virtual machines.

Participants will explore:

• Microsoft Defender Vulnerability Management (MDVM)
• MDVM integration with Defender for Servers
• Selecting appropriate vulnerability-scanning methods
• Configuring vulnerability scanning for Azure VMs
• Reviewing vulnerability findings in the Microsoft Defender portal
• Understanding vulnerability recommendations
• Prioritizing vulnerabilities for remediation
• Using Defender for Servers Plan 2 capabilities
• Security baseline assessment
• Vulnerable application blocking
• Reducing the organization's exposure to exploitable vulnerabilities

Who Should Attend?

This session is ideal for:

• Cloud Security Engineers
• Azure Security Engineers
• Cybersecurity Professionals
• Cloud Architects
• Azure Administrators
• DevSecOps Engineers
• Infrastructure & Systems Engineers
• Security Operations Professionals
• AI Security Professionals
• IT/GRC Professionals
• Professionals preparing for Microsoft security certifications
• IT professionals transitioning into Cloud & AI Security

Don't just secure your cloud—understand, assess, and continuously improve its security posture.

Learn | Connect | Grow | Secure