Which governance feature can restrict which regions are allowed for deploying Azure resources?

Azure Policy is the correct answer because it allows you to define and enforce rules over your Azure resources to ensure compliance with organizational standards. You can create a policy definition that specifies allowed locations (regions) for resource deployment, and then assign this policy to a scope like a subscription or resource group. Any attempt to deploy a resource outside the allowed regions will be blocked. Azure Monitor is incorrect because it focuses on collecting, analyzing, and acting on telemetry data from your Azure and on-premises environments, not enforcing deployment restrictions. Azure Role-Based Access Control (RBAC) is incorrect because it manages who can do what with resources, but doesn't restrict where resources can be deployed. Azure Resource Locks are incorrect because they prevent accidental deletion or modification of resources, not their initial deployment location.