As an organization, you need to protect your users and confidential data from the different methods employed by malicious actors. In general, defender for cloud application help you do this by providing a wide array of capabilities that protect your environment across the following pillars:
Visibility: detect all cloud services; assign each a risk ranking; identify all users and third-party apps able to log in
Data security: identify and control sensitive information (DLP);
Threat protection: offer adaptive access control (AAC); mitigate malware
Compliance: supply reports and dashboards to demonstrate cloud governance; assist efforts to conform to data residency and regulatory compliance requirements