update module fix pr blocking issues

ceperezb · ceperezb · commit 628dd621acea · 2026-02-07T14:56:19.000-05:00
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/1-introduction-endpoint-security.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/1-introduction-endpoint-security.yml
@@ -4,7 +4,7 @@ title: Introduction to endpoint security
 metadata:
   title: Introduction to endpoint security
   description: Learn about designing security solutions for server and client endpoints, including servers, mobile devices, IoT systems, and operational technology.
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/10-summary.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/10-summary.yml
@@ -4,10 +4,10 @@ title: Summary
 metadata:
   title: Summary
   description: "Summary of Design Solutions for Securing Server and Client Endpoints."
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
-durationInMinutes: 3
+durationInMinutes: 2
 content: |
   [!include[](includes/10-summary.md)]
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/2-specify-server-security-requirements.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/2-specify-server-security-requirements.yml
@@ -4,10 +4,10 @@ title: Specify security requirements for servers
 metadata:
   title: Specify security requirements for servers
   description: "SC-100 preparatory unit on the topic: specify security requirements for servers, including multiple platforms and operating systems."
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
-durationInMinutes: 9
+durationInMinutes: 10
 content: |
   [!include[](includes/2-specify-server-security-requirements.md)]
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/3-specify-requirements-mobile-devices-clients.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/3-specify-requirements-mobile-devices-clients.yml
@@ -4,7 +4,7 @@ title: Specify security requirements for mobile devices and clients
 metadata:
   title: Specify security requirements for mobile devices and clients
   description: "Learn how to specify security requirements for mobile devices and client workstations including endpoint protection, hardening, and configuration."
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/4-specify-embedded-device-security-requirements.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/4-specify-embedded-device-security-requirements.yml
@@ -4,10 +4,10 @@ title: Specify security requirements for IoT devices and embedded systems
 metadata:
   title: Specify security requirements for IoT devices and embedded systems
   description: "Learn how to specify security requirements for IoT devices and embedded systems including device identity, network segmentation, and threat detection."
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
-durationInMinutes: 8
+durationInMinutes: 11
 content: |
   [!include[](includes/4-specify-embedded-device-security-requirements.md)]
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/5-design-solution-securing-operational-technology-industrial-control-systems.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/5-design-solution-securing-operational-technology-industrial-control-systems.yml
@@ -4,7 +4,7 @@ title: Evaluate solutions for securing operational technology (OT) and industria
 metadata:
   title: Evaluate solutions for securing operational technology (OT) and industrial control systems (ICS) by using Microsoft Defender for IoT
   description: "Learn how to evaluate Microsoft Defender for IoT for securing OT and ICS environments including deployment models, integrations, and threat detection."
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/6-specify-security-baselines-server-client-endpoints.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/6-specify-security-baselines-server-client-endpoints.yml
@@ -4,7 +4,7 @@ title: Specify security baselines for server and client endpoints
 metadata:
   title: Specify security baselines for server and client endpoints
   description: Learn how to specify security baselines for Windows Server and Windows client endpoints, including SCT baselines for servers and MDM baselines for Intune-managed devices.
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/7-design-solution-secure-remote-access.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/7-design-solution-secure-remote-access.yml
@@ -4,7 +4,7 @@ title: Design a solution for secure remote access
 metadata:
   title: Design a solution for secure remote access 
   description: Learn how to design secure remote access to virtual machines in Azure landing zones using Azure Bastion, just-in-time access, and hybrid connectivity options.
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/8-evaluate-windows-local-admin-password-solution.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/8-evaluate-windows-local-admin-password-solution.yml
@@ -4,7 +4,7 @@ title: Evaluate Windows Local Admin Password Solution (LAPS) solutions
 metadata:
   title: Evaluate Windows Local Admin Password Solution (LAPS) solutions
   description: Learn how to evaluate Windows LAPS for managing local administrator account passwords, comparing backup directories, security models, and migration from legacy LAPS.
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/9-knowledge-check.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/9-knowledge-check.yml
@@ -4,12 +4,12 @@ title: Module assessment
 metadata:
   title: Module assessment
   description: "Knowledge check for module on the topic: design solutions for securing server and client endpoints."
-  ms.date: 02/05/2026
+  ms.date: 02/07/2026
   author: ceperezb
   ms.author: ceperezb
   ms.topic: unit
   module_assessment: true
-durationInMinutes: 10
+durationInMinutes: 5
 ###########################################################################
 ###
 ### General guidance (https://review.learn.microsoft.com/learn-docs/docs/id-guidance-knowledge-check)
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/10-summary.md b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/10-summary.md
@@ -28,8 +28,13 @@ Use the following resources to explore endpoint security topics in greater depth
 
 ### IoT and operational technology
 
+- [Secure your IoT solutions](/azure/iot/iot-overview-security)
+- [Architecture best practices for Azure IoT Hub - Security](/azure/well-architected/service-guides/azure-iot-hub#security)
 - [Microsoft Defender for IoT - Overview](/azure/defender-for-iot/organizations/overview)
-- [Security in your IoT workload - Azure Well-Architected Framework](/azure/architecture/framework/iot/iot-security)
+- [Securing IoT devices in the enterprise](/azure/defender-for-iot/organizations/concept-enterprise)
+- [Security practices for Azure IoT device manufacturers](/azure/iot-dps/concepts-device-oem-security-practices)
+- [Security standards for Azure IoT Edge](/azure/iot-edge/security)
+- [Device Update for IoT Hub](/azure/iot-hub-device-update/)
 
 ### Secure remote access
 
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/2-specify-server-security-requirements.md b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/2-specify-server-security-requirements.md
@@ -4,7 +4,7 @@ As a security architect, you specify the security requirements that guide how yo
 
 When specifying server security requirements, organize them into categories that map to common security frameworks and regulatory standards. This approach ensures comprehensive coverage and simplifies compliance reporting.
 
-**Core requirement categories**:
+**Core requirement categories**
 
 - **Identity and access management**: Authentication methods, privileged access controls, service account management
 - **Network security**: Traffic filtering, segmentation, exposure reduction
@@ -87,17 +87,25 @@ On-premises servers require additional considerations:
 
 Beyond baseline security, specify requirements for active threat protection:
 
-**Endpoint detection and response (EDR)**: Require Microsoft Defender for Endpoint on all servers. Specify that alerts above a defined severity level must be investigated within a specific timeframe.
+**Endpoint detection and response (EDR)**
 
-**Vulnerability scanning**: Specify scanning frequency and remediation timelines:
+Require Microsoft Defender for Endpoint on all servers. Specify that alerts above a defined severity level must be investigated within a specific timeframe.
+
+**Vulnerability scanning**
+
+Specify scanning frequency and remediation timelines:
 
 - Critical vulnerabilities: Remediate within seven days
 - High vulnerabilities: Remediate within 30 days
 - Medium vulnerabilities: Remediate within 90 days
 
-**File integrity monitoring**: For servers processing sensitive data, require monitoring of critical system files and configuration files with alerts on unauthorized changes.
+**File integrity monitoring**
+
+For servers processing sensitive data, require monitoring of critical system files and configuration files with alerts on unauthorized changes.
+
+**Security alerts**
 
-**Security alerts**: Define requirements for alert routing, escalation procedures, and integration with your security operations center (SOC) or SIEM solution.
+Define requirements for alert routing, escalation procedures, and integration with your security operations center (SOC) or SIEM solution.
 
 ## Compliance and regulatory requirements
 
@@ -131,10 +139,10 @@ For most organizations, specify Plan 1 as the baseline requirement for all serve
 
 Your server security specification should include:
 
-1. **Scope definition**: Which servers are covered, organized by criticality tier
-2. **Requirement statements**: Clear, measurable requirements for each security category
-3. **Exception process**: How to request and document exceptions with compensating controls
-4. **Verification methods**: How compliance with each requirement will be assessed
-5. **Review cadence**: How often requirements are reviewed and updated (recommend annually or after significant changes)
+- **Scope definition**: Which servers are covered, organized by criticality tier
+- **Requirement statements**: Clear, measurable requirements for each security category
+- **Exception process**: How to request and document exceptions with compensating controls
+- **Verification methods**: How compliance with each requirement will be assessed
+- **Review cadence**: How often requirements are reviewed and updated (recommend annually or after significant changes)
 
 This structured approach ensures your server security requirements are comprehensive, actionable, and aligned with your organization's risk tolerance and regulatory obligations.
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/3-specify-requirements-mobile-devices-clients.md b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/3-specify-requirements-mobile-devices-clients.md
@@ -71,28 +71,28 @@ Windows client workstations require comprehensive hardening beyond endpoint prot
 
 Specify these baseline categories in your requirements:
 
-**Authentication and access control**:
+**Authentication and access control**
 
 - Require Windows Hello for Business or hardware security keys
 - Configure 14-character minimum password length
 - Set account lockout after failed attempts
 - Enable Credential Guard with UEFI lock
 
-**Attack surface reduction**:
+**Attack surface reduction**
 
 - Block executable content from email and webmail clients
 - Block untrusted and unsigned processes running from USB
 - Enable Virtualization Based Security with Secure Boot
 - Configure Windows Defender Application Control policies
 
-**Network protection**:
+**Network protection**
 
 - Block SMB v1
 - Require SMB signing for all communications
 - Disable multicast name resolution (LLMNR)
 - Block connection to non-domain networks when domain-connected
 
-**Endpoint protection**:
+**Endpoint protection**
 
 - Enable Microsoft Defender Antivirus real-time protection
 - Configure cloud-delivered protection with high blocking level
@@ -116,10 +116,18 @@ For mobile devices, require both device compliance (if enrolled) and app protect
 
 When specifying mobile and client security requirements, consider:
 
-**Enrollment strategy**: Determine which scenarios require full device enrollment versus app-only protection. Corporate devices typically need MDM for comprehensive control, while BYOD may only need MAM.
+**Enrollment strategy**
 
-**Platform coverage**: Ensure requirements address iOS, Android, Windows, and macOS clients. Each platform has different security capabilities and management tools.
+Determine which scenarios require full device enrollment versus app-only protection. Corporate devices typically need MDM for comprehensive control, while BYOD may only need MAM.
 
-**User experience**: Balance security requirements with productivity impact. Overly restrictive policies drive users toward shadow IT alternatives.
+**Platform coverage**
 
-**Compliance dependencies**: Some industries require specific data protection controls. Validate that your requirements meet regulatory obligations for data handling on mobile devices.
+Ensure requirements address iOS, Android, Windows, and macOS clients. Each platform has different security capabilities and management tools.
+
+**User experience**
+
+Balance security requirements with productivity impact. Overly restrictive policies drive users toward shadow IT alternatives.
+
+**Compliance dependencies**
+
+Some industries require specific data protection controls. Validate that your requirements meet regulatory obligations for data handling on mobile devices.
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/4-specify-embedded-device-security-requirements.md b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/4-specify-embedded-device-security-requirements.md
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/5-design-solution-securing-operational-technology-industrial-control-systems.md b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/5-design-solution-securing-operational-technology-industrial-control-systems.md
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/6-specify-security-baselines-server-client-endpoints.md b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/6-specify-security-baselines-server-client-endpoints.md
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/7-design-solution-secure-remote-access.md b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/7-design-solution-secure-remote-access.md
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/8-evaluate-windows-local-admin-password-solution.md b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/includes/8-evaluate-windows-local-admin-password-solution.md
diff --git a/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/index.yml b/learn-pr/wwl-sci/design-solutions-securing-server-client-endpoints/index.yml
