Do I need recaptcha when I enable csrf in ci4?

I am developing a new website. I choose ci4 for it. I plan to prevent bot attack with register form. So I have 2 options : recaptcha and csrf in core framework. Do I need to use recaptcha or csrf or both of them?

You need both, they provide different protection. But don't get fooled recaptcha can be tricked.

You can read this Wikipedia article on what CSRF protect against; https://en.wikipedia.org/wiki/Cross-site...st_forgery