A manufacturing company runs a corporate IT network that includes many managed Windows and macOS endpoints already onboarded to Microsoft Defender for Endpoint (P2). The security architect discovers that the same corporate network segments also contain numerous unmanaged enterprise IoT devices — smart TVs, IP cameras, printers, and VoIP phones — that cannot run an agent. Leadership wants visibility into these devices, vulnerability assessment, and integration into the existing Defender XDR incident experience without deploying new network sensors. Which approach best meets these requirements?