A security administrator at Contoso wants a centralized, measurable way to assess the current state of the organization's identity security posture and receive prioritized recommendations (such as enabling MFA or reducing global admin accounts) with an overall percentage score to track improvement over time. Which Microsoft Entra feature should the administrator use?