You want to onboard an on-premises Windows Server (Server1) to Microsoft Defender for Cloud. Which agent or component must be installed on Server1?

The Azure Connected Machine agent (also known as the Azure Arc agent) is required to onboard on-premises Windows Servers to Microsoft Defender for Cloud. This agent enables the server to be managed as an Azure Arc-enabled server, which is a prerequisite for Defender for Cloud integration. The Azure File Sync agent is for synchronizing files with Azure Storage, not for security onboarding. The Device Health Attestation role is a Windows Server feature for verifying device health, unrelated to Defender for Cloud integration. The Microsoft Entra provisioning agent is used for synchronizing identities to Microsoft Entra ID, not for connecting servers to Defender for Cloud.