Microsoft Defender for Cloud - Servers & Apps Question

Hi, while learning about the Microsoft Defender for Cloud (MDC) Cloud Workload Protection (CWP), I have seen below points.

Servers:

When we opt for MDC CWP for servers, I see Agentless scanning for machines and along with it below,

But we already have "Carbon Black" which handles the above role of Guest Configuration agent.

So, my question is, If I enroll for MDC - Cloud workload protection: 

As we need to have a security/defender tool installed on Azure machines (In this case Guest Configuration agent). Would this then replace "Carbon Black" as we already, have it?  Or do we see this MDC - Cloud workload protection for Servers as additional apart from Carbon Black?

Apps:

We have our Azure Apps protected by Cloudflare and VNet Integration which are with our firewall-based routes, do we still need to enroll for App Service protection by MDC CWP.

Please advise on above 2 areas. Thanks