On VM1 (Windows Server) you will install a line-of-business application that needs to be able to launch child processes. Which feature should you enable on VM1?

Exploit protection is the correct choice because it helps protect applications from exploit techniques used to infect machines and spread malware. By configuring Exploit protection, you can apply mitigation techniques to individual applications, such as preventing child processes from launching, which directly addresses the requirement for the line-of-business application to launch child processes. Microsoft Defender Credential Guard uses virtualization-based security to isolate secrets, preventing credential theft, but doesn't control child process launching. Microsoft Defender Application Control restricts which applications can run on a system, focusing on execution control, not exploit mitigation for child processes. Microsoft Defender SmartScreen protects against phishing and malware websites and downloads, which is unrelated to application child processes.