Implement Azure DDoS Protection
Configure Endpoint Protection for virtual machines (VMs)
Implement and manage security updates for VMs
Configure security for container services
Manage access to Azure Container Registry
Configure security for serverless compute
Configure security for an Azure App Service
Configure encryption at rest
Configure encryption in transit
Configure a custom security policy
Create a policy initiative
Configure security settings and auditing by using Azure Policy
Configure Microsoft Defender for Servers (not including Microsoft Defender for Endpoint)
Evaluate vulnerability scans from Microsoft Defender for Cloud
Use the Microsoft Threat Modeling Tool
Configure Microsoft Defender for SQL