Which Azure service can identify Azure configurations and workloads that are non-compliant with ISO 27001:2013 requirements?

Microsoft Defender for Cloud (formerly Azure Security Center) is the correct answer because it provides cloud security posture management (CSPM) capabilities, including the ability to assess and monitor the compliance of Azure resources against various industry standards and regulatory benchmarks, such as ISO 27001:2013. It identifies misconfigurations and provides recommendations to improve compliance. Azure Sentinel is a Security Information and Event Management (SIEM) solution, focused on threat detection and response, not compliance assessment. Azure Active Directory (Azure AD) Identity Protection focuses on detecting identity-based risks. Microsoft Defender for Identity is an on-premises security solution that leverages Active Directory signals to identify advanced threats.