Question

Difficulty: MediumAzure Monitor and Log Analytics

A company's system administrator wants to automatically receive email notifications if the CPU utilization of any production Azure Virtual Machine exceeds 85%85\%. At the same time, the administrator needs to enforce a compliance rule that prevents developers from deploying new Virtual Machines unless a specific 'Department' tag is applied.

Which combination of Azure services should the administrator use to meet these requirements?

  1. A
    Azure Service Health to track the CPU utilization and send notifications, and Azure Policy to enforce the tagging requirement
  2. Azure Monitor to track the CPU utilization and send notifications, and Azure Policy to enforce the tagging requirementAnswer
  3. C
    Azure Monitor to track the CPU utilization and send notifications, and Azure Role-Based Access Control (RBAC) to enforce the tagging requirement
  4. D
    Azure Service Health to track the CPU utilization and send notifications, and Azure Role-Based Access Control (RBAC) to enforce the tagging requirement

Answer

Azure Monitor to track the CPU utilization and send notifications, and Azure Policy to enforce the tagging requirement
The correct answer specifies Azure Monitor to collect individual resource telemetry (such as VM CPU metrics) and send alerts, paired with Azure Policy to enforce compliance properties like mandatory tags at deployment time.

Step-by-Step Solution

1
Determine the tool required for tracking resource-specific CPU utilization and sending alerts.
Azure Monitor is designed to collect performance metrics and log data from Azure resources and trigger alerts based on metrics like CPU usage.
This isolates the monitoring requirement from broader platform health services.
2
Determine the tool required to enforce resource tagging compliance during deployment.
Azure Policy is used to define and enforce rules (such as requiring a specific tag) that resources must follow during deployment.
This isolates compliance and governance rules from access management (RBAC).
3
Combine the correct services to find the matching choice.
The correct combination is Azure Monitor and Azure Policy.
This matches the requirements of both resource performance alerting and resource tagging enforcement.

Key Concept

Distinguishing the roles of Azure Monitor, Azure Service Health, Azure Policy, and Azure Role-Based Access Control (RBAC)
Rate this question