Question

Difficulty: MediumAzure Monitor Alerts and Action Groups

An administrator is configuring Azure Monitor alerts and action groups to support automated operations and notifications. Match each operational requirement to the most appropriate Azure Monitor Action Group action type. Each action type may be used once, more than once, or not at all.

  • Notify the owners of an Azure subscription whenever an alert triggers on any resource within the subscription.Email Azure Resource Manager Role action
  • Send a push notification directly to an administrator's mobile device via the Azure mobile app.Email/SMS/Push/Voice action
  • Invoke a script in Azure Automation to automatically restart a virtual machine when it becomes unresponsive.Automation Runbook action
  • Deliver a JSON alert payload to an internal API endpoint that requires Microsoft Entra ID authentication.Secure Webhook action

Answer

The requirement to notify subscription owners matches the Email Azure Resource Manager Role action. The requirement to send push notifications to the mobile app matches the Email/SMS/Push/Voice action. The requirement to invoke a script in Azure Automation matches the Automation Runbook action. The requirement to deliver a payload requiring Entra ID authentication matches the Secure Webhook action.
Each requirement is mapped to its most specific and functional Action Group action type. Subscription owners are notified using the Email Azure Resource Manager Role action. Push notifications are configured via the Email/SMS/Push/Voice action. Remediation scripts are executed using the Automation Runbook action. Authenticated API calls are handled via the Secure Webhook action.

Step-by-Step Solution

1
Analyze the requirement for notifying owners of an Azure subscription.
Identify that notifying users based on subscription-level RBAC roles corresponds to the Email Azure Resource Manager Role action.
This avoids hardcoding individual email addresses and dynamically resolves to users holding the Owner role.
2
Analyze the requirement for sending push notifications to the Azure mobile app.
Identify that mobile push notifications are grouped under the Email/SMS/Push/Voice action type.
This receiver handles direct messaging to user endpoints, including email, SMS text messages, push notifications, and voice calls.
3
Analyze the requirement to run a script in Azure Automation to restart a VM.
Identify that triggering an automated task or script in Azure Automation corresponds to the Automation Runbook action.
Runbooks are the standard way to execute long-running administrative or remediation tasks in Azure Automation.
4
Analyze the requirement to send a JSON payload securely with Microsoft Entra ID authentication.
Identify that secure delivery to APIs requiring Entra ID authentication corresponds to the Secure Webhook action.
Secure Webhook uses a service principal and OAuth 2.0 token to authenticate the outgoing request from Azure Monitor.

Key Concept

Azure Monitor Action Groups support various action types (receivers) to dispatch notifications or execute automated remediation tasks when alerts trigger.
Rate this question