In summary, I would have you walk away from this lesson thinking more
deeply about data security in all of its states. We've got data at
rest, data in transit, and data in use.
So what we saw in this lesson is thinking about BitLocker.
It is largely an at rest data security mechanism. You might
think to yourself, for example, okay,
I've got an Azure VM and I'm using Azure Disk Encryption. If I export or
download the disk from that VM to on‑prem, does that mean it comes down to
my local environment encrypted still or unencrypted? It's important to know
this. It stays encrypted. And yes,
you can save or back up or export keys out of your Key Vault if you
do indeed need to take a cloud‑based disk on‑prem. You'd probably be
better off decrypting it in the cloud and then doing your export and
then lastly re‑encrypting it.
But just think about those different states. Something else that you
saw in the demo is Storage Service Encryption,
which is an at rest encryption that takes place for your Azure virtual
machine disks when the VMs are stopped and deallocated and when the VHDs
are simply resident in Azure managed storage. This allows you to confirm
to your compliance department that you're either trusting Microsoft with
those Storage Service Encryption keys or you as the customer managing
those as well.
Data in transit leads me to always think of TLS and making sure you're doing
HTTPS in your applications. And then data in use, well, that is going to be
outside the purview of BitLocker. Once your VM data,
whether it's an on‑premises machine or an Azure machine,
once the data is in memory and in use,
then that's a case of thinking about some of the other tools that we've examined
throughout this course and how we can bring those to bear.
So that's it for the course.
I want to thank you one more time for your
participation. I appreciate you very much.
You can look at all of my Pluralsight courses by going to
timw.info/ps. It's actually an alias from my personal website,
timw.info. And then email is tim@timw.info.
My twitter handle I don't have on this slide. It's
different. It's techtrainertim. I post on Microsoft and
certification just about every day.
Happy studying to you.
I look forward to hearing about your exam success in the future. Take good care