This lab covers the full vulnerability management lifecycle on two freshly deployed Azure VMs. The Ubuntu machine doubles as both a target and a scanner host. The Windows machine is a standalone target with no domain infrastructure. Both were assessed from an external Kali Linux host using credentialed scans, then hardened based on the findings, then re-scanned to confirm improvement.