educationApr 6, 202623:31pending
Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 7: A Comprehensive Guide to Virtual Machine and Container Security
About this episode
In this lesson, you’ll learn about securing infrastructure and application workloads in Microsoft Azure, with a focus on Virtual Machines and containerized environments:Virtual Machine (VM) Security
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
- Understanding the shared responsibility model:
- Azure secures the cloud
- You secure the OS, applications, and configurations
- Key security practices:
- Endpoint Protection:
- Using Microsoft Antimalware or third-party solutions
- OS Hardening:
- Applying Center for Internet Security benchmarks
- Disabling unnecessary services and tightening permissions
- Identity Management:
- Using Managed Identities to eliminate hard-coded credentials
- Update Management:
- Automating patching with Azure Update Management for Windows & Linux
- Endpoint Protection:
- Using containers for lightweight, portable applications with Docker
- Core Azure container services:
- Azure Container Instances (ACI) – quick, serverless containers
- Azure Container Registry (ACR) – private image storage
- Azure Kubernetes Service (AKS) – container orchestration
- Security best practices:
- Vulnerability Scanning:
- Scan images regularly for known exploits
- Trusted Registries:
- Use private registries instead of public/unverified images
- Registry Protection:
- Disable admin keys
- Use Azure AD + RBAC
- Enable firewall rules and Content Trust (image signing)
- Vulnerability Scanning:
- Securing container workloads:
- Implementing network segmentation
- Managing secrets securely (no hardcoding)
- Enforcing least-privilege runtime permissions
- Reducing risks such as:
- Container escape
- Host takeover
- Unauthorized access
- Understanding Kubernetes architecture:
- Managed control plane (Azure-managed)
- Worker nodes (VMs you manage)
- Workloads organized into pods and namespaces
- Practical operations:
- Deploying apps using kubectl
- Configuring secure access to ACR using service principals
- Monitoring workloads via Kubernetes dashboard
- VM security depends on hardening, patching, and identity control
- Container security requires trusted images and strict access control
- ACR and AKS provide secure, scalable platforms when configured properly
- Defense-in-depth is essential across VMs, containers, and orchestration layers
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
Get every episode summarized
Each time CyberCode Academy publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
Hosts & guests
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from CyberCode Academy
Course 42 - Mobile Malware Analysis Fundamentals | Episode 13: Designing and Arc...
CyberCode Academy
Sep 9, 202617:34pending
Course 42 - Mobile Malware Analysis Fundamentals | Episode 12: Dynamic Analysis...
CyberCode Academy
Sep 8, 202628:08completed
Course 42 - Mobile Malware Analysis Fundamentals | Episode 11: Dynamic Analysis...
CyberCode Academy
Sep 7, 202624:15completed
Course 42 - Mobile Malware Analysis Fundamentals | Episode 10: The Essentials of...
CyberCode Academy
Sep 6, 202623:12completed