An organization needs to implement continuous compliance monitoring for all Azure AI resources against a custom compliance framework. The framework requires that all Azure OpenAI resources must have diagnostic logging enabled, use private endpoints, and be encrypted with customer-managed keys. Which Azure service provides continuous compliance monitoring and remediation for these requirements?

Azure Policy with audit, deny, and deployIfNotExists effect policies assigned to a compliance initiative is correct because Azure Policy provides continuous compliance monitoring and remediation for Azure resources. A compliance initiative, also called a policy set, can include policies with the audit effect to identify non-compliant resources, the deny effect to prevent non-compliant deployments, and the deployIfNotExists effect to automatically remediate resources, such as deploying diagnostic settings. This combination provides both monitoring and remediation for the diagnostic logging, private endpoint, and customer-managed key requirements. Microsoft Defender for Cloud with a custom security standard applied to the AI resource subscriptions is incorrect because Defender for Cloud security standards can incorporate Azure Policy definitions for compliance monitoring, but Azure Policy itself is the underlying engine; Defender for Cloud provides the security posture layer, not remediation for resource configuration compliance. Microsoft Purview Compliance Manager with a custom assessment template is incorrect because Purview Compliance Manager tracks regulatory compliance and provides improvement actions, but does not perform technical enforcement or automated remediation of Azure resource configurations. Azure Monitor compliance dashboards with custom metric alerts are incorrect because Azure Monitor compliance dashboards do not exist as a native compliance monitoring service for resource configuration requirements.