Tech Community Live: AMA – Manage endpoint security in Microsoft Endpoint Manager

1. First question: When do you set just one place where to configure Endpoint Security Settings? Currently we have Security Baseline, Endpoint Security section and configuration Profiles.
2. Second question: What are the concrete advantages, really in practice, to use Microsoft Defender for Endpoint compared to just use and configure Windows Defender Antivirus and Firewall? Currently in my company we are using some AD Hybrid-Joined devices with third party Antivirus and Internet Security suite (AVAST) but we are trying to figure out if we could move and only use Microsoft Defender Antivirus, firewall and all that those bring in. Thanks

(Numbered/formatted for easy reference by your friendly neighborhood Community Manager.)