You have 15 identical Azure virtual machines in resource group RG1. Prevent unauthorized applications and malware from running on these VMs. Which action should you take?

Adaptive application controls, a feature within Azure Security Center (now Microsoft Defender for Cloud), are designed to prevent unauthorized applications and malware from running on virtual machines. They achieve this by creating a baseline of known safe applications and then alerting or blocking execution of anything outside that baseline. Applying an Azure Policy to RG1 could enforce certain configurations but wouldn't directly prevent unauthorized applications from running. Azure Active Directory Identity Protection focuses on user identity risks, not application execution on VMs. Applying a resource lock to RG1 prevents accidental deletion or modification of resources but does not control what applications run on the VMs.