Which two preventative controls can you implement to increase the secure score?

Your company is preparing for cloud adoption.

You are designing security for Azure landing zones.

Which two preventative controls can you implement to increase the secure score? Each NOTE: Each correct selection is worth one point.
A . Azure Firewall
B . Azure Web Application Firewall (WAF)
C . Microsoft Defender for Cloud alerts
D . Azure Active Directory (Azure AD Privileged Identity Management (PIM)
E . Microsoft Sentinel

Answer: AB

Explanation:

https://docs.microsoft.com/en-us/azure/defender-for-cloud/secure-score-security-controls