Which Azure capability can automatically remediate virtual machine assignments of public IP addresses?

Azure Policy with remediation tasks is the correct answer because Azure Policy allows you to define rules and effects for your resources to ensure compliance with organizational standards. When a resource, like a virtual machine, is found to be non-compliant (e.g., having a public IP when it shouldn't), a remediation task can be configured to automatically bring it back into compliance, such as removing the public IP assignment. Azure Sentinel is a SIEM solution for security analytics. Azure Monitor Alerts notify you of issues but don't automatically remediate them. Azure Blueprints help define repeatable sets of Azure resources but don't automatically remediate ongoing non-compliance.