A company needs to protect users from malicious URLs and attachments that are in emails. You need to select a solution that meets the requirement. Which service should you select?

Microsoft Defender for Office 365 provides advanced threat protection specifically for email and collaboration tools, including features like Safe Links, which scans and rewrites malicious URLs, and Safe Attachments, which detonates suspicious attachments in a sandbox environment to prevent malware delivery. These capabilities directly address the requirement to protect users from malicious email content.

Microsoft Defender for Identity focuses on protecting Active Directory identities from advanced threats and compromised accounts, not the content of incoming emails.

Microsoft Defender for Endpoint provides endpoint detection and response (EDR) and threat protection for devices like workstations and servers, not for scanning email messages themselves.

Microsoft Cloud App Security (now Defender for Cloud Apps) is a Cloud Access Security Broker (CASB) that helps discover, control, and protect data across cloud apps, but it is not the primary service for direct email content scanning against malicious URLs and attachments for end-users.