
Explanation:
Box 1: The Azure Connected Machine agent and an Azure virtual machine extension.
Microsoft Defender for Cloud, Enable Microsoft Defender for SQL servers on machines Set up Microsoft Defender for SQL servers on machines The Defender for SQL server on machines plan requires Azure Monitoring Agent (AMA) to prevent attacks and detect misconfigurations.
Note: The Azure Connected Machine agent (Azure Arc agent) connects your non-Azure machine to Azure for management and governance, while the Azure Monitor agent (AMA) collects performance data, logs, and metrics from the machine. The Connected Machine agent is a prerequisite, acting as a bridge to Azure, and it enables you to install the AMA as an extension to send monitoring data to Azure Monitor.
Box 2: The Azure Connected Machine agent and an Azure virtual machine extension.
Reference:
https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-usage
https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/overview