There are many options when you want to enhance the security of your VMs . Here are a few options that when configured correctly will greatly improve your security posture.
Reduce open network ports:
- Use Just-in-Time to avoid exposure of management ports
- Limit open ports with adaptive network hardening
Protect against malware:
- Block malware with adaptive application controls
- Built-in Microsoft Defender ATP EDR
- Crash dump analysis and fileless attack detection
Use the built-in vulnerability assessment for VMs:
- Automated deployment of the vulnerability scanner
- Continuously scans installed applications to find vulnerabilities
- Visibility to the vulnerability findings in Security Center portal and APIs
