Exploit protection automatically applies a number of exploit mitigation techniques on both the operating system processes and on individual apps. It's good practice that these settings are forced via GPO/registry and users are disallowed to make changes.

https://www.stigviewer.com/stig/windows_10/2018-04-06/finding/V-77025