A security architect is designing the identity layer for an AI system that must serve as a trusted reference for other downstream systems' security decisions. The AI system attests to its configuration state (model version, content filter settings, and security controls enabled) before downstream systems consume its outputs. Which Microsoft technology enables cryptographic attestation of a system's security configuration?

Azure Confidential Computing with Microsoft Azure Attestation Service is correct because Azure Confidential Computing enables running workloads in hardware-isolated Trusted Execution Environments (TEEs). Microsoft Azure Attestation Service provides cryptographic attestation—generating signed attestation tokens that prove a system (such as an AI model server) is running in a genuine TEE with a specific, unmodified configuration. Downstream systems can verify these attestation tokens cryptographically to confirm the AI system's security posture before trusting its outputs. Microsoft Entra Verified ID is wrong because it is a decentralized identity system for issuing and verifying human identity credentials (like employment or age verification); it is not designed for machine/system configuration attestation. Microsoft Defender for Cloud regulatory compliance assessment is wrong because it evaluates resource configurations against frameworks, but it does not provide cryptographic proof of configuration state that downstream systems can verify programmatically. Azure Policy compliance state reporting is wrong because it shows whether resources meet policy definitions, but this is administrative reporting, not cryptographic attestation of runtime security configuration.