You have a Microsoft $365$ E$5$ subscription that uses Microsoft Exchange Online.

The tenant contains the following objects:

A verified domain named Contoso.com.

A user named User$1.$

A mail$-$enabled security group named Group$1.$

You plan to create an anti$-$malware policy named Policy$1.$

Which objects can you include in Policy$1?$