fix link

Author: mattbriggs

articles/azure-arc/choose-service.md

@@ -129,7 +129,7 @@ Azure Arc-enabled System Center Virtual Machine Manager also allows you to manag
 
 The following table provides a quick way to see the major capabilities of the three Azure Arc services that connect your existing Windows and Linux machines to Azure Arc.
 
-|  |Arc-enabled servers  |Arc-enabled VMware vSphere  |Arc-enabled SCVMM  |Arc-enabled Azure Stack HCI  |SQL Server enabled by Azure Arc  |
+| _ |Arc-enabled servers  |Arc-enabled VMware vSphere  |Arc-enabled SCVMM  |Arc-enabled Azure Stack HCI  |SQL Server enabled by Azure Arc  |
 |---------|---------|---------|---------|---------|---------|
 |Microsoft Defender for Cloud     |✓         |✓         |✓         |✓         |✓         |
 |Microsoft Sentinel     | ✓        |✓         |✓         |✓         |✓         |

articles/azure-arc/site-manager/how-to-configure-monitor-site.md

@@ -27,7 +27,7 @@ If you aren't familiar with Azure Monitor, learn more about how to [monitor Azur
 
 ## Configure alerts for sites in Azure Arc
 
-This section provides basic steps for configuring alerts for sites in Azure Arc. For more detailed information about Azure Monitor, see [Create or edit an alert rule](../../azure-monitor/alerts/alerts-create-metric-alert-rule.md).
+This section provides basic steps for configuring alerts for sites in Azure Arc. For more detailed information about Azure Monitor, see [Create or edit an alert rule](../../azure-monitor/alerts/alerts-create-metric-alert-rule.yml).
 
 To configure alerts for sites in Azure Arc, follow the below steps.
 

articles/azure-government/azure-secure-isolation-guidance.md

@@ -862,7 +862,7 @@ Compared to traditional on-premises hosted systems, Azure provides a greatly **r
 PaaS VMs offer more advanced **protection against persistent malware** infections than traditional physical server solutions, which if compromised by an attacker can be difficult to clean, even after the vulnerability is corrected. The attacker may have left behind modifications to the system that allow re-entry, and it's a challenge to find all such changes. In the extreme case, the system must be reimaged from scratch with all software reinstalled, sometimes resulting in the loss of application data. With PaaS VMs, reimaging is a routine part of operations, and it can help clean out intrusions that haven't even been detected. This approach makes it more difficult for a compromise to persist.
 
 #### Side channel attacks
-Microsoft has been at the forefront of mitigating **speculative execution side channel attacks** that exploit hardware vulnerabilities in modern processors that use hyper-threading. In many ways, these issues are similar to the Spectre (variant 2) side channel attack, which was disclosed in 2018. Multiple new speculative execution side channel issues were disclosed by both Intel and AMD in 2022. To address these vulnerabilities, Microsoft has developed and optimized Hyper-V **[HyperClear](/virtualization/community/team-blog/2018/20180814-hyper-v-hyperclear-mitigation-for-l1-terminal-fault)**, a comprehensive and high performing side channel vulnerability mitigation architecture. HyperClear relies on three main components to ensure strong inter-VM isolation:
+Microsoft has been at the forefront of mitigating **speculative execution side channel attacks** that exploit hardware vulnerabilities in modern processors that use hyper-threading. In many ways, these issues are similar to the Spectre (variant 2) side channel attack, which was disclosed in 2018. Multiple new speculative execution side channel issues were disclosed by both Intel and AMD in 2022. To address these vulnerabilities, Microsoft has developed and optimized Hyper-V **[HyperClear](https://techcommunity.microsoft.com/t5/virtualization/hyper-v-hyperclear-mitigation-for-l1-terminal-fault/ba-p/382429)**, a comprehensive and high performing side channel vulnerability mitigation architecture. HyperClear relies on three main components to ensure strong inter-VM isolation:
 
 - **Core scheduler** to avoid sharing of a CPU core’s private buffers and other resources.
 - **Virtual-processor address space isolation** to avoid speculative access to another virtual machine’s memory or another virtual CPU core’s private state.