A company runs several virtual machines in Azure that administrators occasionally need to connect to over RDP and SSH. The security team wants to reduce the exposure of these management ports by keeping them closed by default and only opening them to a requesting administrator's IP address for a limited time window, with the requests logged for auditing. Which Microsoft Defender for Cloud capability should they enable?