Using Microsoft Defender for Cloud Apps, you will perform a security audit of all applications discovered by Cloud Discovery and need to mark which apps were audited so that the audited list appears in the cloud app catalog. What should you do?

Applying a custom app tag allows you to categorize and mark specific applications within Microsoft Defender for Cloud Apps. This is the direct method for indicating which apps have been audited, making them easily identifiable and filterable in the cloud app catalog for future reference. Deploying Conditional Access App Control is used for real-time monitoring and control of app access and sessions, not for marking audit status. Defining each app as a critical asset is a classification for risk management, not for tracking audit completion. Generating a Cloud Discovery snapshot report provides a one-time view of discovered apps but doesn't mark individual apps as audited within the catalog. Enabling app governance is a broader feature for managing app behavior and compliance, not for tagging audit status.