Examkin

Soru

Zorluk: KolayAzure Monitor Metrics and Diagnostic Settings

You need to configure diagnostic settings for several Azure resources to meet specific logging and compliance requirements. Match each administrative requirement to its correct Azure Monitor diagnostic destination. Which diagnostic destination matches each requirement?

  • Archive resource logs for long-term, low-cost retentionAzure Storage account
  • Stream logs in near real-time to a third-party security information and event management (SIEM) systemAzure Event Hubs
  • Perform interactive analysis and run KQL queries across log dataLog Analytics workspace

Cevap

To archive logs for long-term, low-cost retention, use an Azure Storage account. To stream logs in near real-time to a third-party SIEM system, use an Azure Event Hubs namespace. To perform interactive analysis and run KQL queries, use a Log Analytics workspace.
The mapping correctly pairs the required diagnostic destinations to their primary use cases: Azure Storage for archiving, Azure Event Hubs for real-time external streaming, and Log Analytics workspace for log analysis and querying.

Adım Adım Çözüm

1
Analyze the requirement for low-cost, long-term archiving.
Identify that Azure Storage account is optimized for archiving data at low cost over long durations.
Azure Storage is standard for archiving data that is infrequently accessed.
2
Analyze the requirement for streaming logs in near real-time to a third-party SIEM system.
Identify that Azure Event Hubs is the event streaming platform used to send diagnostic data to external consumers.
Event Hubs acts as an ingestion pipeline and integrates with SIEM solutions like Splunk.
3
Analyze the requirement to query logs using KQL.
Identify that a Log Analytics workspace is the underlying store for Azure Monitor Logs where KQL queries are executed.
Log Analytics provides the query engine and interface for running KQL.

Anahtar Kavram

Azure Monitor diagnostic settings allow routing platform logs and metrics to a Storage account, Event Hubs, or a Log Analytics workspace based on usage needs.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Azure Monitor Metrics and Diagnostic Settings

Bu konudan daha fazla soru