Examkin

Question

Difficulty: HardAzure Monitor and Log Analytics

A company manages a hybrid environment with workloads running on both on-premises servers and Azure Virtual Machines. The operations team is establishing a monitoring and automated remediation plan to address the following administrative requirements:

1. Detect when a global Azure platform outage or planned infrastructure maintenance by Microsoft impacts the availability of their database hosting resources in the East US region.
2. Consolidate and query event log data from both the Azure Virtual Machines and the on-premises servers within a single workspace using a common query language.
3. Automatically trigger a virtual machine reboot if the CPU utilization of a specific database server exceeds 95%95\% for more than 1515 minutes.

Which combination of Azure services or features is required to meet these requirements?

  1. A
    1. Azure Monitor Metrics, 2. Azure Service Health, 3. Azure Policy
  2. 1. Azure Service Health, 2. Log Analytics, 3. Azure Monitor Alerts with an action groupAnswer
  3. C
    1. Azure Service Health, 2. Azure Advisor, 3. Azure Monitor Alerts with an action group
  4. D
    1. Azure Monitor Logs, 2. Log Analytics, 3. Azure Service Health

Answer

1. Azure Service Health, 2. Log Analytics, 3. Azure Monitor Alerts with an action group
The option containing '1. Azure Service Health, 2. Log Analytics, 3. Azure Monitor Alerts with an action group' is correct. Azure Service Health notifies you about Azure service outages and planned maintenance affecting your resources. Log Analytics workspaces consolidate and allow querying of logs from both Azure and on-premises hosts. Azure Monitor Alerts with action groups allow you to define metric thresholds (like CPU usage) and trigger automated remediations (like restarting a VM) when triggered.

Step-by-Step Solution

1
Evaluate Requirement 1 regarding platform outages and maintenance.
Identify that Azure Service Health is the dedicated service to track platform-wide outages and planned infrastructure maintenance that impact resources.
Azure Monitor Metrics/Logs only track telemetry of resources you own, not the global health of the underlying Azure platform.
2
Evaluate Requirement 2 regarding querying hybrid event log data in a single workspace.
Identify Log Analytics (Azure Monitor Logs) as the tool capable of aggregating and querying logs from both Azure VMs and on-premises physical servers using Kusto Query Language (KQL).
Log Analytics agents can be installed on non-Azure servers to stream event data to a centralized workspace.
3
Evaluate Requirement 3 regarding automatically rebooting a VM based on CPU threshold alerts.
Identify that Azure Monitor Alerts using an action group configured to run an automation runbook or webhook meets the automated remediation criteria.
Azure Policy is for governance and compliance, and cannot perform automated actions based on real-time metric evaluations.

Key Concept

Distinguishing between Azure Monitor (Metrics, Logs, and Alerts) and Azure Service Health for monitoring and remediation.
Estimated Time:2m 0s
Rate this question

Topics

Azure Monitor and Log Analytics

More questions from this topic