You need update compliance reporting in Azure for 200 Windows Server 2019 and 2022 machines currently configured to use WSUS. You want to use Windows Update for Business reports to track quality update compliance and safeguard holds. Which two steps are required?

To use Windows Update for Business reports, devices must be configured to scan against Microsoft Update. This means disabling any Group Policy or MDM settings that direct them to an internal WSUS server, such as the "Specify intranet Microsoft update service location" policy. Windows Update for Business reports relies on data flowing directly from devices to Microsoft Update. The second essential step is to set up Windows Update for Business reports in your Azure tenant, which involves connecting an Azure Log Analytics workspace to store and analyze the update compliance data. Incorrect options: Enabling WSUS to forward update status to Azure Monitor is not how Windows Update for Business reports functions; it's a separate reporting mechanism. While Azure Arc and Update Management Center can manage updates, they do not inherently provide Windows Update for Business reports, which is a distinct service. The Endpoint Analytics client is for device performance and health, not for feeding update compliance data into Windows Update for Business reports.