You manage a set of Azure Windows Server VMs. Requirement: Azure must automatically assess missing updates daily and install only security updates every Sunday from 01:00 to 03:00 local time, rebooting VMs only if required. Which configuration should you choose in Update Management Center?

The correct option aligns with all requirements. Enabling periodic assessment (Automatic) ensures daily checks for missing updates. Setting patch orchestration to AutomaticByPlatform allows Azure to manage the update process, including reboots. A weekly schedule targeting security updates (classification=Security) within a specific time window (120-minute window, 01:00-03:00 Sunday) and rebooting only if required (reboot=If required) meets the installation and reboot criteria. Incorrect options: "AutomaticByOS" is not a valid orchestration setting; "AutomaticByPlatform" is correct. Setting reboot=Never violates the requirement for reboots when necessary. Disabling periodic assessment means updates won't be assessed daily. Setting reboot=Always could lead to unnecessary downtime. Leaving orchestration as Manual prevents Azure from automatically managing updates. Hotpatch is for specific Windows Server versions and only applies to certain types of updates, not all security updates, and doesn't meet the scheduling or assessment requirements.