What does 'Protected' mean for discovered apps?

[GI472]

I recently exported a list of the apps discovered by Microsoft Defender for Cloud apps. 

Previously, the types were Discovered, Sanctioned, Unsanctioned, and Monitored. However, on the last export I saw that some of the main Microsoft apps were classified as 'Protected'. 

What does this mean, and what are the implications?

I can't find any reference to the apps being 'Protected' in the Defender portal, only on the export.

[#2 · Accepted solution]

@GI472 Protected apps are the ones that are connected to your Defender for Cloud Apps environment, whether it is by an App Connector, by using Conditional Access App Control.

Hope this helps.

[#3]

Amazing, thank you!

Is there anything else I should be aware of in the MCAS bit of Defender for these apps?