As the Microsoft 365 administrator, you want to identify how an attacker could move from an internet-exposed device to reach a domain controller classified as a critical asset. You need a view that visualizes the chokepoints and step-by-step routes an adversary could take between entities, so remediation can be prioritized on the nodes that break the most routes. Which Microsoft Security Exposure Management capability should you use?