Microsoft Defender for Cloud is the designated Azure service for Cloud Security Posture Management (CSPM). A core feature of its CSPM capabilities is the regulatory compliance dashboard. This dashboard continuously assesses your Azure environment against security benchmarks and regulatory standards, including ISO 27001:2013. It provides a compliance score, identifies non-compliant resources, and offers actionable recommendations to remediate misconfigurations, directly addressing the requirement to identify non-compliant configurations and workloads.

A. Azure AD Identity Protection is a tool for detecting and remediating identity-based risks and vulnerabilities, not for assessing Azure resource compliance against standards.
C. Microsoft Defender for Identity focuses on identifying threats using signals from on-premises Active Directory; it does not assess Azure workload compliance.
D. Microsoft Sentinel is a Security Information and Event Management (SIEM) tool for threat detection and response, not a compliance assessment tool.

1. Microsoft Learn | Microsoft Defender for Cloud documentation. "Tutorial: Improve your regulatory compliance." This document explicitly states, "Microsoft Defender for Cloud helps streamline the process for meeting regulatory compliance requirements, using the regulatory compliance dashboard." It lists ISO 27001 as a default standard available on the dashboard.

2. Microsoft Learn | Microsoft Defender for Cloud documentation. "Overview of Microsoft Defender for Cloud." Under the "Cloud security posture management (CSPM)" section, it describes how Defender for Cloud assesses your environment and provides "compliance with regulatory standards like CIS, PCI DSS, and ISO 27001."

3. Microsoft Learn | Microsoft Defender for Cloud documentation. "Customize the set of standards in your regulatory compliance dashboard." This page details how to manage compliance standards and explicitly includes "ISO 27001:2013" in the table of built-in standards that can be applied to subscriptions.