...
Description: This control ensures that Monitor missing Endpoint Protection in Azure Security Center is enabled for at least one policy assignment with policy definition Enable Monitoring in Azure Security Center. When this setting is not disabled, it recommends endpoint protection be provisioned for all Windows virtual machines to help identify and remove viruses, spyware, and other malicious software.
...