A DevOps team needs to automatically detect and remediate noncompliant resources. Which Azure feature should they configure?

Azure Policy with remediation tasks is the correct choice because it allows you to define rules (policies) that describe the desired state of your Azure resources. When resources deviate from these policies (become noncompliant), Azure Policy can automatically trigger remediation tasks to bring them back into compliance. This directly addresses the need for automatic detection and remediation. Azure Activity Log records events that occurred in your Azure subscription, but it doesn't enforce compliance or perform remediation. Azure Role Assignments control who has access to what resources, focusing on authorization rather than compliance enforcement. Resource Locks prevent accidental deletion or modification of resources, but they don't detect or remediate noncompliance based on defined rules.