Examkin

Question

Difficulty: EasyAzure Monitor Alerts and Action Groups

An Azure administrator is setting up alerts to monitor resource health and performance. Which Azure Monitor alert type corresponds to each of the trigger scenarios described?

  • Metric alert ruleTriggers when a system performance metric, such as CPU Percentage, exceeds a configured threshold.
  • Activity log alert ruleTriggers when a write or delete operation occurs on an Azure resource, such as deleting a virtual machine.
  • Log search alert ruleTriggers when a Kusto Query Language (KQL) query returns a specified number of results.

Answer

Metric alert rule matches the scenario evaluating numerical performance thresholds like CPU Percentage. Activity log alert rule matches the scenario evaluating control-plane resource operations like virtual machine deletions. Log search alert rule matches the scenario evaluating custom log datasets using Kusto Query Language (KQL).
Metric alerts are optimized for numeric threshold checking. Activity log alerts capture management events. Log search alerts run scheduled KQL queries on workspaces.

Step-by-Step Solution

1
Analyze the telemetry source of the first trigger scenario.
The first scenario monitors a numeric counter over time (CPU Percentage).
Numerical performance counters are classified as metrics in Azure Monitor.
2
Analyze the telemetry source of the second trigger scenario.
The second scenario tracks management operations (deleting a virtual machine).
Administrative events and operations on resources are written to the Azure Activity Log.
3
Analyze the telemetry source of the third trigger scenario.
The third scenario evaluates log records via a KQL query.
KQL is the query language used to search Log Analytics Workspaces in Log Search alerts.

Key Concept

Azure Monitor Alert Signal Types
Estimated Time:1m 0s
Rate this question

Topics

Azure Monitor Alerts and Action Groups

More questions from this topic