Question

Difficulty: MediumAzure Backup Reports and Monitoring

You are setting up Azure Backup Reports to analyze the historical backup compliance of several workloads protected by multiple Recovery Services vaults. You need to ensure that the backup report data is populated and accessible for reporting via the Azure portal. Which of the following configuration actions should you perform? (Select two)

  1. Configure a diagnostic setting on each Recovery Services vault to route logs to a Log Analytics workspace.Answer
  2. Select the resource-specific log categories, including CoreBackup and AddonAzureBackupJobs, in the vault diagnostic settings.Answer
  3. C
    Create a diagnostic setting on the protected virtual machines to send Guest OS metrics to the Log Analytics workspace.
  4. D
    Configure the Recovery Services vaults to export Azure Monitor Metrics to a firewall-enabled storage account.

Answer

Configure a diagnostic setting on each Recovery Services vault to route logs to a Log Analytics workspace, and select the resource-specific log categories, including CoreBackup and AddonAzureBackupJobs, in the vault diagnostic settings.
To populate Azure Backup Reports, data must be sent from the Recovery Services vaults to a Log Analytics workspace. Configuring diagnostic settings on each vault to route logs to a Log Analytics workspace ensures the data is central and queryable. Selecting the resource-specific log categories (including CoreBackup and AddonAzureBackupJobs) sends the correct schema and operational events needed by the reporting interface.

Step-by-Step Solution

1
Identify the data repository requirement for Azure Backup Reports.
Determine that Azure Backup Reports query diagnostic logs stored in a Log Analytics workspace.
Log Analytics workspace acts as the central storage repository that Backup Reports use to compile historical data.
2
Determine the source of the reporting data.
Identify that the Recovery Services vaults host the backup data, requiring diagnostic settings to be configured on the vaults themselves, not on the protected resources.
The vault tracks the job status, policies, and protected items, which are the metadata needed for reporting.
3
Select the appropriate log categories in the diagnostic settings.
Enable the resource-specific categories (like CoreBackup, AddonAzureBackupJobs, AddonAzureBackupPolicy, etc.) to feed data into the workspace.
Choosing these specific logs ensures that only the required backup metadata is sent, providing all necessary reporting data while managing ingestion costs.

Key Concept

Azure Backup Reports are populated by configuring Recovery Services vaults to send diagnostic logs (using resource-specific tables like CoreBackup and AddonAzureBackupJobs) to a Log Analytics workspace.
Rate this question