Examkin

Question

Difficulty: EasyAzure Monitor Metrics and Diagnostic Settings

An administrator is configuring diagnostic settings for an Azure Firewall named FW1 to stream resource logs for security analysis and long-term retention. Which of the following destinations can be specified directly as targets in the diagnostic settings of FW1? (Select two.)

  1. A Log Analytics workspaceAnswer
  2. An Azure Storage accountAnswer
  3. C
    An Azure Recovery Services vault
  4. D
    A Network Security Group flow log configuration

Answer

A Log Analytics workspace and an Azure Storage account
Azure Monitor diagnostic settings support sending platform logs and metrics to a Log Analytics workspace, an Azure Storage account, an Azure Event Hub, or Azure Monitor partner integrations. Therefore, specifying a Log Analytics workspace and a storage account is the correct configuration.

Step-by-Step Solution

1
Identify the purpose of diagnostic settings
Diagnostic settings are used to route resource logs and metrics to supported external destinations.
This establishes the scope of available targets.
2
Evaluate the supported target destinations for Azure Monitor diagnostic settings
Supported destinations include Log Analytics workspaces, Azure Storage accounts, Event Hubs, and partner integration solutions.
This allows filtering of the provided options.
3
Select the matching correct options and eliminate unsupported resources
Log Analytics workspace and Storage account are supported. Recovery Services vaults and Network Security Group flow logs are not diagnostic targets.
This determines the final correct answers.

Key Concept

Supported destinations for Azure Monitor diagnostic settings
Rate this question

Topics

Azure Monitor Metrics and Diagnostic Settings

More questions from this topic