A security architect at a manufacturing company must prioritize remediation across a large hybrid estate that includes Azure VMs, on-premises servers onboarded via Azure Arc, and internet-facing web applications. The CISO complains that Secure Score recommendations produce thousands of individual findings with no clear indication of which combinations of weaknesses could actually let an attacker reach the company's crown-jewel SQL databases. The architect needs a capability that models chained vulnerabilities and misconfigurations to reveal the specific routes an attacker could traverse to reach critical assets, so the team can break those routes first. Which Microsoft solution should the architect recommend?