Phase 2: Module 06 - Security

[kristopherjturner]

Parent Epic: #3

Description

Write content for Module 06: Security. Expand from the thin 2-hour overview in the old training to a comprehensive security module.

Source Material

• archive/Delivery Guide/Delivery-Guide-Security.md
• archive/PowerPoint/06 - Security/

Tasks

• Write 06-security/index.md -- module overview, learning objectives, estimated duration
• Write 06-security/secured-core-server.md (KEEP -- expanded)
  • Secured-core server overview
  • Hardware requirements
  • Enabling and verifying Secured-core
  • HVCI, VBS, TPM requirements
• Write 06-security/bitlocker-and-encryption.md (KEEP)
  • BitLocker for OS and data volumes
  • Encryption at rest for S2D
  • Key management
• Write 06-security/smi-and-drift-protection.md (NEW)
  • Security baseline management (SMI)
  • Drift protection and remediation
  • WDAC (Windows Defender Application Control) policies
  • Security posture monitoring
• Write 06-security/network-security.md (KEEP)
  • Datacenter firewall rules
  • Network isolation
  • Micro-segmentation via SDN (link to Module 04)

Content Decisions

• KEEP: Secured-core, BitLocker, network security
• ADD: SMI, drift protection, WDAC policies
• EDIT: Expand significantly from old thin overview
• Level: L200-L300

Acceptance Criteria

• All 5 files have complete, accurate content
• Security module is comprehensive (not a thin overview)
• SMI and drift protection are new additions

[kristopherjturner]

Tracked in Azure DevOps: https://dev.azure.com/hybridcloudsolutions/Azure%20Local%20Training/_workitems/edit/215