A multi-user session-host estate needs detection and response against malware and suspicious endpoint activity. Which capability should be evaluated?

1. An image version number alone
2. FSLogix profile portability alone
3. A public DNS zone as antivirus
4. Supported endpoint protection such as Microsoft Defender for Endpoint