In this learning path, you're introduced to Azure Arc-enabled servers. You'll cover Arc-enabled server deployment, updates to Arc-enabled servers using Azure Update Manager and configuring Microsoft Defender for Cloud for Azure Arc-enabled servers.

Prerequisites

• Experience using the Azure portal to create resources.
• Basic knowledge of security concepts like identities, permissions, and encryption.
• Basic knowledge of networking concepts like virtual networks, subnetting, and hybrid scenarios.
• Basic knowledge of Azure Policy and Azure Arc concepts.

Modules in this learning path

Introduction to Azure Arc-enabled servers

This module introduces you to Azure Arc-enabled servers and describes its characteristics, capabilities, and use cases.

• Introduction
• What are the characteristics of Azure Arc-enabled servers?
• What are the core management and governance capabilities of Azure Arc-enabled servers?
• What are the security and monitoring capabilities of Azure Arc-enabled servers?
• Summary

Plan and deploy Azure Arc-enabled servers at scale

Azure Arc promises to bridge the gap between on-premises and cloud environments. Azure Arc-enabled servers extends the consistent security, observability, and governance of the Azure platform to non-Azure machines. In this module, you'll learn about planning and securely deploying Azure Arc-enabled servers at scale.

• Introduction
• What is Azure Arc-enabled servers and its capabilities?
• Test Azure Arc-enabled servers capabilities using Azure VMs
• Planning considerations for a secure configuration
• Explore different methods to onboard servers at scale to Azure Arc
• Best practices for Azure Arc-enabled servers management and services in Azure
• Knowledge check
• Summary

Govern your hybrid and multicloud machines through Azure Arc-enabled servers

Azure Arc promises to bridge the gap between on-premises and cloud environments. Azure Arc extends the consistent security, observability, and governance of the Azure platform to non-Azure machines. In this module, you learn about governance of Azure Arc-enabled servers.

• Introduction
• Govern Azure Arc-enabled servers with Azure Policy Guest Configuration
• Assign Azure Policies to govern Azure Arc-enabled servers
• Azure Automanage best practices for Azure Arc-enabled servers
• Modernize deployment, response, and orchestration of Azure Arc-enabled servers with Azure Automation
• Knowledge check
• Summary

Configure updates of Azure Arc-enabled servers by using Azure Update Manager

Update Manager is a unified service that helps manage and govern updates for all your machines. It allows you to monitor Windows and Linux update compliance across Azure and on-premises from a single dashboard.

• Introduction
• Azure Update Manager
• Azure Update Manager key features
• How to manage updates for Azure Arc-enabled servers
• Create a maintenance configuration schedule
• Associate a virtual machine with a schedule
• Knowledge check
• Summary

Configure Microsoft Defender for Cloud for Azure Arc-enabled servers

By the end of this module, you'll understand how Microsoft Defender for Cloud for Azure Arc-enabled servers can help you protect your cloud-based applications from various cyber threats.

• Introduction
• What is Microsoft Defender for Cloud?
• Secure cloud applications
• Protect cloud workloads
• Connect your non-Azure machines to Microsoft Defender for Cloud
• Connect on-premises machines by using Azure Arc
• Connect on-premises machines by using the Azure portal
• Onboard a Windows server
• Onboard a Linux server
• Verify that your machines are connected
• Knowledge check
• Summary

Manage Azure Arc-enabled servers by using scripting

This module covers the topic of enabling Azure Arc for Windows or Linux machines in your environment. Enabling Arc-enabled servers is done either manually or by using an automated method with a provided template script.

• Introduction
• Connect hybrid machines to Azure using a deployment script
• Connect hybrid machines to Azure by using PowerShell
• Connect machines at scale by running PowerShell scripts with Configuration Manager
• Knowledge check
• Summary

Guided exercise - Manage on-premises Windows servers by using Azure Arc

In this guided exercise, you practice onboarding, securing, monitoring, and updating on-premises Windows servers by using Azure Arc. The guided exercise combines both learning and hands-on practice.

• Introduction
• Exercise 1 - Onboard Windows servers to Azure Arc
• Exercise 2 - Manage Azure Arc-enabled Windows servers by using Azure Policy
• Exercise 3 - Enhance security of Azure Arc-enabled Windows servers by using Microsoft Defender for Cloud
• Exercise 4 - Monitor Azure Arc-enabled Windows servers by using Azure Monitor
• Exercise 5 - Manage updates of Azure Arc-enabled Windows servers by using Azure Update Manager
• Exercise 6 - Configure on-premises Windows servers by using Azure virtual machine extensions and CLI
• Knowledge check
• Summary