Reference:
https://docs.microsoft.com/en-us/azure/bastion/bastion-overview
https://docs.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal

Explanation
eDiscovery
https://docs.microsoft.com/en-us/microsoft-365/compliance/ediscovery?view=o365-worldwide

Explanation
You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

Section: Describe the Capabilities of Microsoft Security Solutions
Explanation/Reference:
https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

Explanation:
Graphical user interface, text, application Description automatically generated