What security feature in Windows Server $2019$ is designed to protect against common security exploits by restricting the use of certain system calls?

Question $19$ options:

Windows Defender Antivirus

AppLocker

Windows Defender Exploit Guard

Network Access Protection $($NAP$)$