You'll get many varied opinions, easiest is just using Microsoft Defender augmented with either Configure Defender or DefenderUI, add browser extensions such a Ublock and Malwarebytes Browser Guard, set your DNS to something like Quad9 or Cloudfare and use your brain in watching what you install and what you click on. Read this forum for a week or so and you'll get lots of good ideas.
You can also get inspiration by reading the security configurations posted by other forum members.
Keep in mind that the best configuration for you is the one you know how to manage best.
If you can afford it, a good backup program to a external drive, can be a real security help(macrium reflect is recommended )security in the sense to restore, keep external drive unplugged after backing up. There are others to use but I would not be qualified which,just ask on the forum if you want good advice.