Examkin

Question

Difficulty: MediumImplement Azure Monitor Alerts and Action Groups

You are configuring an Azure Monitor Action Group to route alert notifications to a secured custom webhook endpoint. The webhook endpoint is secured using Microsoft Entra ID. You need to ensure that the Action Group can successfully authenticate and send alerts to the webhook. Which configuration should you use for the Webhook receiver in the Action Group?

  1. A
    Store the webhook client secret in Azure Key Vault, configure a system-assigned managed identity for the Action Group, and grant it GET permission on the secret.
  2. Enable Microsoft Entra ID authentication in the Webhook receiver settings, and provide the Tenant ID and client Application ID (Object ID) of the target application.Answer
  3. C
    Add the Application Insights connection string to the Custom Headers section of the Webhook receiver to authenticate the payload.
  4. D
    Include an explicit KQL time-range parameter in the Webhook URI query string to handle token expiration during alert evaluation.

Answer

Enable Microsoft Entra ID authentication in the Webhook receiver settings, and provide the Tenant ID and client Application ID (Object ID) of the target application.
To secure an Action Group Webhook receiver using Microsoft Entra ID, you must enable the Active Directory authorization option and provide the Tenant ID and target Object ID. When the alert fires, Azure Monitor retrieves an Entra ID token and includes it in the Authorization header of the webhook request.

Step-by-Step Solution

1
Open the Action Group configuration in Azure Monitor and add a new action with the action type set to Webhook.
The Webhook receiver configuration pane opens, prompting for a URI and other authorization details.
This initiates the configuration of the webhook target.
2
Enable the 'Use Azure Active Directory auth' (Microsoft Entra ID) option in the configuration.
Input fields for Tenant ID and Application/Object ID become active.
This instructs Azure Monitor to acquire an Entra ID token before sending requests to the webhook.
3
Provide the Tenant ID and client Application ID (Object ID) of the target Entra ID application registration.
The Webhook action is successfully configured with token-based authentication.
These details are required so Azure Monitor can identify the target resource and fetch the correct authentication token.

Key Concept

Action Group Webhook authentication using Microsoft Entra ID
Rate this question

Topics

Implement Azure Monitor Alerts and Action Groups

More questions from this topic