Examkin

Question

Difficulty: MediumAzure Monitor Alerts and Action Groups

An administrator is configuring an Azure Monitor action group to send alert notifications to a backend API. The API is protected by Microsoft Entra ID. The administrator must ensure that the action group can authenticate securely against the API when alerts are triggered.

Which configuration must the administrator perform to support this secure notification flow?

  1. Enable the secure webhook option in the action group and provide the object ID of the Microsoft Entra ID application registration.Answer
  2. B
    Configure an alert processing rule to inject authentication headers into the alert payload before forwarding to the webhook.
  3. C
    Create a diagnostic setting for the action group that routes token exchange requests directly to the webhook endpoint.
  4. D
    Assign the Monitoring Publisher role to the public IP address of the webhook endpoint at the subscription scope.

Answer

Enable the secure webhook option in the action group and provide the object ID of the Microsoft Entra ID application registration.
To secure a webhook action in an Azure Monitor action group, you must register the receiving Web API in Microsoft Entra ID. This generates an application registration. In the action group configuration, enabling the 'Use secure webhook' option and providing the Object ID of this application registration configures Azure Monitor to use Entra ID to authenticate the request before posting the alert payload to the endpoint.

Step-by-Step Solution

1
Identify the authentication mechanism required for the backend API.
The API requires Microsoft Entra ID authentication, meaning the calling service must acquire a token from Entra ID.
This establishes that standard anonymous webhooks will be rejected by the endpoint.
2
Determine the capabilities of Azure Monitor action groups regarding authentication.
Action groups support secure webhooks by associating the webhook action with an Entra ID application registration.
This allows Azure Monitor to obtain a bearer token on behalf of the action group to authenticate against the Web API.
3
Configure the action group with the Entra ID application identity.
Enable the 'Use secure webhook' option and enter the object ID of the Entra ID application registration representing the API.
Providing the object ID links the action group's webhook action to the correct security principal in the directory.

Key Concept

Secure Webhooks in Azure Monitor Action Groups
Estimated Time:1m 30s
Rate this question

Topics

Azure Monitor Alerts and Action Groups

More questions from this topic