As the Azure administrator for your organization, you are tasked with ensuring that all new virtual machines (VMs) deployed across your Azure environment use only a specific set of approved images to maintain security and compliance standards. The solution must automatically enforce this requirement without manual intervention and should be scalable to accommodate future growth. Additionally, the solution must provide compliance reporting to audit VM deployments against the approved images. Which of the following approaches BEST meets these requirements? (Choose two options if option E is available.)