1. With 'hosts' do you mean VMs or ESXi nodes?
2. How will you provide the 'desired settings'?
3. I suspect you mean 'not set'?

4. What should be in that report?

5.2 Why would there be VMs remaining to be hardened?