Detections
Analytics

CIS MongoDB 5 L1 OS Windows v1.0.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS MongoDB 5 L1 OS Windows v1.0.0

Updated: 8/9/2022

Authority: Operating Systems and Applications

Plugin: Unix

Revision: 1.2

Estimated Item Count: 17

Audit Items

DescriptionCategories
2.1 Ensure Authentication is configured
2.2 Ensure that MongoDB does not bypass authentication via the localhost exception
2.3 Ensure authentication is enabled in the sharded cluster - authenticationMechanisms
2.3 Ensure authentication is enabled in the sharded cluster - CAFile
2.3 Ensure authentication is enabled in the sharded cluster - clusterAuthMode
2.3 Ensure authentication is enabled in the sharded cluster - clusterFile
2.3 Ensure authentication is enabled in the sharded cluster - PEMKeyFile
3.3 Ensure that MongoDB is run using a non-privileged, dedicated service account
4.2 Ensure Weak Protocols are Disabled
4.3 Ensure Encryption of Data in Transit TLS or SSL (Transport Encryption)
5.1 Ensure that system activity is audited
6.1 Ensure that MongoDB uses a non-default port
7.1 Ensure appropriate key file permissions are set - CAFile
7.1 Ensure appropriate key file permissions are set - keyFile
7.1 Ensure appropriate key file permissions are set - PEMKeyFile
7.2 Ensure appropriate database file permissions are set.
CIS_mongodb_5_Benchmark_Level_1_OS_Linux_v1.0.0.audit from CIS MongoDB 4 Benchmark