A security engineer needs to create a Microsoft Sentinel workbook that shows the geographic distribution of Azure OpenAI API calls over the past 7 days, highlighting calls from countries outside the expected usage regions. Which Microsoft Sentinel feature provides geographic visualization capabilities?

A is correct because Microsoft Sentinel Workbooks (built on Azure Monitor Workbooks) support map visualization components that can plot geographic data. By querying AzureDiagnostics logs for Azure OpenAI API calls and extracting or resolving the caller IP to geographic coordinates, engineers can create a map visualization showing the distribution of API calls by region and highlight outliers from unexpected countries. B is incorrect because Fusion ML correlates alerts for high-fidelity incident detection; it does not provide workbook visualization components for geographic data. C is incorrect because Defender XDR advanced hunting is a separate query interface and does not have a map visualization for geographic API call distribution. D is incorrect because the Threat Intelligence map shows threat actor-associated countries from TI feeds, not actual Azure OpenAI API call geography from diagnostic logs.