Examkin

Soru

Zorluk: OrtaAzure Monitor Metrics and Diagnostic Settings

An administrator is designing a monitoring strategy for several Azure resources. You need to route diagnostic logs to the appropriate destination based on the monitoring requirements.

Match each monitoring requirement to the correct Azure Monitor diagnostic setting destination.

  • Retain resource logs for 365365 days for compliance auditing at the lowest cost.Azure Storage account
  • Perform complex query analysis and run KQL queries to correlate events across multiple resources.Azure Log Analytics workspace
  • Stream diagnostic data in real-time to a third-party Security Information and Event Management (SIEM) system.Azure Event Hubs namespace

Cevap

Retaining logs for 365365 days at lowest cost matches the Azure Storage account. Performing complex KQL query analysis matches the Log Analytics workspace. Streaming diagnostic data to a third-party SIEM system matches the Azure Event Hubs namespace.
The correct pairings match each requirement to the primary purpose of the respective Azure resource: Azure Storage for low-cost long-term retention; Log Analytics workspace for KQL analysis; and Event Hubs for real-time external streaming.

Adım Adım Çözüm

1
Analyze the requirement for archiving logs for 365365 days at the lowest cost.
Identify that Azure Storage provides the cheapest long-term archival solution with lifecycle management rules.
Log Analytics and Event Hubs are more expensive for long-term storage and do not offer low-cost archival storage tiers.
2
Analyze the requirement to run interactive KQL queries across resources.
Identify that a Log Analytics workspace is the native repository in Azure Monitor designed for KQL queries, alerts, and dashboards.
Neither Storage Accounts nor Event Hubs natively support KQL querying.
3
Analyze the requirement to stream logs to a third-party SIEM in real-time.
Identify Event Hubs as the native broker for streaming data ingestion to external systems.
Storage accounts are pull/polling-based and Log Analytics is optimized for query-based analytics rather than real-time message streaming.

Anahtar Kavram

Azure Monitor Diagnostic Settings Destinations
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Azure Monitor Metrics and Diagnostic Settings

Bu konudan daha fazla soru