Examkin

Soru

Zorluk: ZorAzure Monitor Alerts and Action Groups

An administrator is configuring monitoring and alerting for an Azure subscription containing several production virtual machines. The administrator has the following requirements:

1. Send an email notification to the operations team if CPU utilization exceeds 90% for a sustained period.
2. Trigger an external automation endpoint (webhook) securely using Microsoft Entra ID authentication if a virtual machine is deleted.
3. Temporarily disable notifications during scheduled weekly maintenance windows.

Which of the following statements regarding the behavior and configuration of these Azure Monitor alerts and Action Groups are correct? (Select two)

  1. If the CPU alert triggers repeatedly, email notifications to a single email address will be throttled if they exceed 100 emails in an hour.Cevap
  2. To secure the webhook action using Microsoft Entra ID authentication, you must configure the Action Group with the Object ID of the service principal representing the webhook's application registration.Cevap
  3. C
    To suppress notifications during the scheduled maintenance windows, you must programmatically disable the alert rules at the start of the window and re-enable them at the end.
  4. D
    SMS notifications configured in the Action Group for critical alerts are exempt from rate limiting to ensure real-time delivery during incident cascades.

Cevap

Email notifications are rate-limited to 100 emails per hour per address, and securing a webhook with Entra ID authentication requires specifying the service principal's Object ID.
Email actions in Azure Monitor Action Groups are rate-limited to a maximum of 100 emails per hour per address to avoid spam. To secure a webhook action with Microsoft Entra ID authentication, you must configure the Action Group with the Object ID of the service principal representing the webhook application registration.

Adım Adım Çözüm

1
Analyze the notification rate-limiting behavior for email actions.
Email actions in Azure Monitor Action Groups are throttled if they exceed 100 emails per hour to a specific email address.
This is a built-in protection mechanism in Azure Monitor to prevent notification fatigue and spam.
2
Evaluate secure webhook requirements with Microsoft Entra ID authentication.
The Action Group must be configured with the Object ID of the service principal of the registered application that represents the secure webhook endpoint.
This establishes the identity authorization flow required to trigger the secure endpoint.
3
Determine the correct approach to suppress notifications during maintenance.
Alert Processing Rules should be configured to suppress notifications during the maintenance window.
Directly disabling and enabling rules manually or via script creates configuration overhead and is prone to errors.
4
Check the rate limiting behavior for SMS notifications.
SMS notifications are rate-limited to 1 message every 5 minutes per phone number.
This prevents excessive charges and message floods, making the claim that they are exempt incorrect.

Anahtar Kavram

Azure Monitor Alert and Action Group configuration including rate limits, secure webhook authentication, and alert suppression.
Bu soruyu puanla

Konular

Azure Monitor Alerts and Action Groups

Bu konudan daha fazla soru