You have 15 Azure virtual machines in a resource group named RG1.

All the virtual machines run identical applications.

You need to prevent unauthorized applications and malware from funning on the virtual machines. Authorized applications must be able to run on the virtual machines.

What should you do?