You have an Azure environment. You need to identify any Azure configurations and workloads that are non-compliant with ISO 27001:2013 standards. What should you use?

Azure Active Directory Identity Protection focuses on detecting and remediating identity-based risks, not on assessing the compliance of general Azure configurations or workloads against regulatory standards.

Microsoft Defender for Cloud provides a regulatory compliance dashboard that offers built-in initiatives for standards like ISO 27001:2013. This service continuously assesses your Azure resources against these benchmarks, identifies non-compliant configurations, and provides actionable recommendations to improve your security posture and meet compliance requirements.

Microsoft Defender for Identity monitors identity activities in hybrid environments to detect advanced threats, rather than auditing cloud resource configurations for regulatory compliance.

Microsoft Sentinel is a SIEM/SOAR solution primarily used for security information and event management, threat detection, investigation, and response, not for continuous regulatory compliance assessment of infrastructure.