An organization wants protection tailored to supported server and database workloads, beyond posture recommendations. Which Defender for Cloud concept applies?

1. Resource naming conventions only
2. Data retention alone
3. Single sign-on alone
4. Cloud workload protection