Security controls must extend to supported on-premises and other-cloud servers. Which onboarding approach should be evaluated?

1. Copy a dashboard screenshot to the server
2. Azure Arc integration and the applicable Defender for Servers configuration
3. Add the server name to a public DNS zone only
4. Assume an Azure subscription automatically protects every external server