Examkin

Question

Difficulty: MediumAzure Monitor Alerts and Action Groups

You are designing a monitoring strategy for an Azure environment. You need to map each operational requirement to the correct Azure Monitor component. Match each requirement to the appropriate component.

  • Identify administrative control-plane operations performed on resources within a subscription, such as when a virtual machine is deleted.Activity Log Alert
  • Monitor high-frequency, numerical data points to detect performance issues with low latency, such as when virtual machine CPU usage exceeds 90%.Metric Alert
  • Execute complex Kusto Query Language (KQL) queries at regular intervals to analyze log patterns, such as counting failed database connection attempts.Log Search Alert
  • Orchestrate notifications, webhooks, and IT service management integrations to notify the support team when an alert triggers.Action Group

Answer

Identify administrative control-plane operations matches with Activity Log Alert; Monitor high-frequency, numerical data points matches with Metric Alert; Execute complex KQL queries matches with Log Search Alert; Orchestrate notifications matches with Action Group.
The correct matches align each specific Azure Monitor resource or configuration item with its corresponding operational function: Activity Log alerts for administrative operations, Metric alerts for numerical telemetry, Log Search alerts for queries using KQL, and Action Groups for routing notifications.

Step-by-Step Solution

1
Analyze the log source for control-plane events.
Determine that actions like resource deletions are recorded in the Activity Log, making Activity Log Alerts the correct mechanism.
Activity logs track resource management operations at the subscription and resource level.
2
Analyze performance-based requirements.
Determine that numerical thresholds like CPU utilization are tracked via metrics, making Metric Alerts the correct mechanism.
Metric telemetry is optimized for high-frequency, low-latency evaluation of numeric values.
3
Analyze requirements involving custom log analysis.
Determine that querying structured workspace tables using KQL query conditions maps to Log Search Alerts.
Log Search Alerts run KQL queries to evaluate logs at set time intervals.
4
Analyze how notifications are processed.
Associate the orchestration of email alerts, webhooks, and automation tools with Action Groups.
Action Groups centralize the configuration of notification channels and automated action targets.

Key Concept

Azure Monitor Alert and Action Configurations
Estimated Time:2m 0s
Rate this question

Topics

Azure Monitor Alerts and Action Groups

More questions from this topic