You have an Azure subscription that contains an Azure Virtual Desktop session host named VM1. You plan to deploy an app named App1 that will process Personally Identifiable Information (Pll) data.

You need to ensure that App1 is deployed to a confidential virtual machine. The solution must minimize administrative effort What should you do?