A team expects workload-specific detections, but the relevant Defender plan has not been enabled and prerequisites are missing. What should be checked?

1. Only the model's prompt length
2. The applicable protection plan, resource onboarding, permissions, and required collection configuration
3. Only the resource's display color
4. Assume every protection feature is automatically active on every resource