You manage hybrid Windows Server machines onboarded with Azure Arc. You want to standardize patching using Update Management Center: assess compliance every Sunday and automatically patch only servers tagged PatchRing=Prod during a defined window, without creating or linking a Log Analytics workspace or Automation account. Which two actions should you take?

To assess compliance weekly, you need to create a periodic assessment schedule in Update Management Center, setting it to run every Sunday. This directly addresses the requirement for weekly compliance assessment. To automatically patch only specific servers, you must create a patch policy in Update Management Center. This policy should use a dynamic scope targeting resources with the tag PatchRing=Prod and define the necessary maintenance window for patching. Update Management Center (UMC) is a modern solution that does not require a Log Analytics workspace or Automation account for its core functionality, making options involving them incorrect. WSUS is a local update source and not directly managed by UMC for scheduling, and the legacy Update Management solution is explicitly avoided by using UMC.