Which service provides granular access control to restrict access to sensitive Azure resources?

Role-Based Access Control (RBAC) is the correct answer because it allows you to manage who has access to Azure resources, what they can do with those resources, and what areas they can access. RBAC provides fine-grained access management for Azure, enabling you to assign specific roles (like Reader, Contributor, or Owner) to users, groups, or applications at different scopes (subscription, resource group, or individual resource). This ensures that only authorized individuals or services can perform specific actions on sensitive resources. Azure Policy helps enforce organizational standards and assess compliance, but it doesn't directly grant or deny access to resources based on user identity. Resource Locks prevent accidental deletion or modification of resources, but they are not an access control mechanism. Azure Tags are used for organizing and categorizing resources, not for managing access permissions.