A security administrator wants a single measurement that summarizes the organization's overall security posture across identities, devices, apps, and Microsoft 365 services, along with prioritized recommended actions to improve it. Which capability within the Microsoft Defender portal should the administrator use?