test-vm2

Region: westus2
Overview
Critical
0
High
1
Medium
7
Low
3
Informational
0
Security issues (11)
Severity Non-Compliance Issue Remediation Read more Action
Low Virtual Machine is not launched from an Azure managed VM image. To have a consistent baseline VM that could be helpful in development and test environments, ensure that your VMs are created from Azure managed VM images. More info
Medium CIS 7.1 Virtual Machine is not configured to use Azure managed Disk Volume. For reliable, efficient and simplified disk management, ensure that your VMs are configured to use managed Disk Volumes. More info
Medium Virtual Machine has no VM agent enabled. To let Defender for Cloud collect data from your VMs to monitor for security vulnerabilities and threats, ensure that your VMs have VM agent enabled. More info
Medium Virtual Machine does not have boot diagnostics enabled. To capture server serial console output and the OS screenshots required for diagnosing and troubleshooting VM startup issues, make sure the VMs have boot diagnostics enabled. More info
Medium Virtual Machine has Guest-Level Diagnostics disabled. For more insight into the state of your VMs, ensure that Guest-Level Diagnostics is enabled for all your VMs. More info
Medium Virtual Machine has Performance Diagnostics disabled. To help mitigate VM performance issues, ensure that Performance Diagnostics is enabled for all your VMs. More info
Medium Virtual Machine uses no Azure Active Directory (AAD) credentials for secure SSH/RDP access. To simplify the access permission management by enforcing policies that allow or deny access to your VMs from one central location, ensure that your VMs have AAD based SSH Login extension installed. More info
Medium HIPAA (Backup) Virtual Machine does not have backups enabled. To follow data security best practices and compliance requirements, make sure the VMs have backups enabled. More info
Low Virtual Machine has no backup policies configured. To handle more efficiently the restoration process in the event of a failure, ensure that your VMs have the instant restore retention period set to 5 days. More info
Low Virtual Machine has no daily backup retention period configured. To handle more efficiently the restoration process in the event of a failure, ensure that your VMs have daily backup retention period set to 30 days. More info
High Virtual Machine has password authentication enabled. To remove the ability for remote attackers to brute-force credentials, ensure that your VMs are configured to use SSH keys instead of username/password credentials for SSH authentication. More info