A company is planning to use Microsoft Threat Protection. The company needs to protect Windows 10 client computers from malicious viruses. The company also needs to identify unauthorized cloud apps th

Azure Advanced Threat Protection (Azure ATP, now Microsoft Defender for Identity) focuses on detecting threats and compromised identities within on-premises Active Directory environments, not on protecting Windows 10 endpoints from viruses or discovering cloud apps.

Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) is the endpoint security platform designed specifically to protect Windows 10 devices from malicious viruses and advanced threats, providing antivirus, endpoint detection and response (EDR), and automated investigation capabilities directly on client machines.

Office 365 Advanced Threat Protection (now Microsoft Defender for Office 365) is designed to protect against threats in email, links, and Office 365 collaboration tools such as SharePoint and Teams, not for endpoint antivirus protection or shadow IT cloud app discovery.

Microsoft Cloud App Security (MCAS) is a Cloud Access Security Broker (CASB) that discovers and monitors cloud application usage across the organization, enabling administrators to identify unauthorized or unsanctioned cloud apps (Shadow IT) used by end users through traffic log analysis and integration with endpoints.