An on-premises Hyper-V VM named VM1 will be onboarded to Defender for Cloud via Azure Arc. Which agent must be installed first on VM1?

The Azure Connected Machine agent (also known as the Azure Arc agent) is essential for onboarding on-premises servers, including Hyper-V VMs, to Azure Arc. This agent allows the VM to be managed as an Azure resource, enabling Defender for Cloud to extend its protection to the on-premises environment. Without this agent, the VM cannot communicate with Azure Arc. The guest configuration agent is part of Azure Policy and is used for auditing and configuring settings within the guest OS, but it relies on the Azure Connected Machine agent for initial connectivity. The Azure Monitor agent (AMA) and the Log Analytics agent (MMA) are used for collecting logs and performance data, which are often deployed after a machine is onboarded to Azure Arc to provide monitoring capabilities, but they are not the initial onboarding agent.