Hi,
Here is the list of CIS-hardened images for which Azure Update Manager supports. If the image you are using is not one of those than it is not supported. You can try fill in this form although it is unclear if it is still valid. If you are not using CIS image I would suggest to use deploy CIS image instead of applying CIS on unsupported image by Azure Update Manager.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.