Summary
In this chapter, we discussed how to evaluate the security posture of a company for its Azure, hybrid, and multi-cloud environments by utilizing the tools within Microsoft Defender for Cloud. This included evaluating security controls for regulatory compliance, including using Azure Security Benchmark, Secure Score recommendations, and workload protections to alert and protect against vulnerabilities and threats on compute, storage, and networks. You learned how to design security in Azure landing zones and evaluate threat intelligence and risks to determine mitigation.
In the next chapter, you will learn how to design a security strategy for on-premises and cloud virtual machines, as well as other networked endpoints.