Global Bank relies heavily on Microsoft Azure to host critical banking applications and services.

Azure Monitor is the Azure-native platform for collecting, analyzing, and visualizing telemetry across Azure resources, including metrics and logs from infrastructure, applications, and services. For SOC needs, it provides centralized observability: resource metrics, activity logs, diagnostic logs, and integration with log analytics for query and alerting. This supports both performance monitoring and security monitoring by enabling detection of unusual behaviors (unexpected spikes, anomalous access patterns) and providing dashboards and alerting to support rapid response. Azure Firewall is a network security control focused on traffic filtering and policy enforcement; it does not serve as the comprehensive telemetry collection and visualization layer for all Azure resources. Azure Policy focuses on governance and compliance enforcement by evaluating and enforcing resource configuration rules; it’s important but not the main telemetry analysis solution. Azure Active Directory is the identity service (now commonly referred to as Entra ID) and is essential for authentication/authorization, but it is not the cross-resource monitoring platform. Since the question emphasizes broad telemetry collection, analysis, and visualization across Azure resources for continuous monitoring, Azure Monitor is the correct service.