To implement DevSecOps by adding policy checks into deployment pipelines, which should a DevOps engineer use?

Azure Policy is the correct choice because it allows you to define, assign, and manage standards for resources to ensure compliance. By integrating Azure Policy into deployment pipelines, you can enforce security and compliance rules (policy checks) before or during resource deployment, which is a core aspect of DevSecOps. Azure Advisor provides recommendations for optimizing Azure resources, but it doesn't enforce policies. Azure Blueprints helps define repeatable sets of Azure resources that adhere to organizational standards, but Azure Policy is the enforcement mechanism within a blueprint. Azure Resource Graph is a service for exploring Azure resources at scale, not for policy enforcement.