You have an on-premises server named Server1 that runs Windows Server. You have an Azure subscription. You need to onboard Server1 to Microsoft Defender for Cloud. What should you install on Server1?

The Azure File Sync agent is used to synchronize files between on-premises Windows file servers and Azure Files, which is unrelated to onboarding a server to Microsoft Defender for Cloud.

The Microsoft Entra provisioning agent is used for synchronizing identities from on-premises directories to Microsoft Entra ID or for cloud HR provisioning, not for onboarding a server to Microsoft Defender for Cloud.

The Azure Connected Machine agent (also known as the Azure Arc agent) is specifically designed to onboard on-premises Windows and Linux machines to Azure Arc, which then allows them to be managed as Azure resources, including integration with services like Microsoft Defender for Cloud for security monitoring and management.

The Device Health Attestation role is a Windows Server role that provides a service to verify the health status of client devices, unrelated to onboarding a server to Microsoft Defender for Cloud.