Microsoft Azure Security Technologies AZ-500 — Question 330

You have an Azure subscription named Sub1 that uses Microsoft Defender for Cloud. You have the management group hierarchy shown in the following exhibit. You create the definitions shown in the following table. You need to use Defender for Cloud to add a security policy. Which definitions can you use as a security policy?