
Explanation:

Basic Concept: This question tests secure database administration, where the control must match the data state, access boundary, identity model, or compliance requirement.
Why the selected answer is Correct: The selected values fit this scenario because they apply the required Azure SQL configuration at the correct scope and sequence: RG1 contains an instance of SQL Server on Azure Virtual Machines named SQL You need to use PowerShell to enable and configure automated patching for SQL The solution must include both SQL Server and Windows security updates.
Why the alternate choices are Wrong: The alternate selections apply to different administrative stages or different scopes. In a hotspot or drag-drop task, order and scope are part of the answer, so a technically valid Azure feature can still be wrong if it is placed in the wrong step.