Azure Monitor must collect a selected set of Windows events from onboarded servers. What should be configured?

1. A resource tag alone
2. A data collection rule with the intended sources, destinations, and associations
3. A DNS conditional forwarder
4. A VM reservation