Examkin

Soru

Zorluk: Çok zorAzure Monitor Alerts and Action Groups

You are designing the monitoring and notification architecture for an Azure environment. Match each operational requirement to the most appropriate Azure Monitor alert or notification configuration.

  • Trigger a secure automation workflow in response to a resource group deletion, ensuring that the webhook receiver validates the caller's identity using Microsoft Entra ID.An Action Group with a Webhook action secured by a Microsoft Entra ID App Registration.
  • Deliver immediate, non-intrusive notifications to administrators' mobile devices for CPU spikes on virtual machines located in a region where Azure SMS support is unavailable.An Action Group with an Azure App Push notification configured for targeted user accounts.
  • Temporarily disable all Action Group notifications for a specific set of critical virtual machines during a scheduled weekly maintenance window.An Alert Processing Rule configured with notification suppression targeting the specific resources during scheduled hours.
  • Configure an alert on a custom Log Analytics query that runs every 5 minutes, ensuring that only one notification is sent even if the query returns multiple distinct virtual machine failures.A Log Search Alert with the aggregation granularity set to 5 minutes and 'Split by dimensions' disabled.

Cevap

Triggering a secure Entra ID authenticated workflow matches with an Action Group with a Webhook action secured by a Microsoft Entra ID App Registration. Delivering mobile alerts where SMS is unavailable matches with an Action Group with an Azure App Push notification. Temporarily disabling notifications matches with an Alert Processing Rule configured with notification suppression. Creating one alert notification for multiple VM failures matches with a Log Search Alert with 'Split by dimensions' disabled.
Matching each scenario to the proper feature ensures secure communication, global reach, simplified maintenance scheduling, and structured log search alert consolidation.

Adım Adım Çözüm

1
Analyze webhook security requirements.
Azure Monitor Action Groups support securing webhooks using Entra ID. This requires registering an app in Microsoft Entra ID to allow token verification by the receiver.
Allows the receiver to authenticate incoming webhook requests securely.
2
Evaluate notification channel limits.
SMS alerts are restricted in certain regions and carrier networks. Azure App Push notifications use mobile application push services to deliver alerts globally to devices running the Azure mobile app.
Resolves geographic SMS carrier delivery limitations.
3
Identify suppression mechanisms.
Alert Processing Rules can suppress action groups during maintenance windows without altering the alert rules or the action group definitions.
Simplifies administrative overhead during scheduled downtime.
4
Analyze aggregation behavior in Log Search Alerts.
Disabling the 'Split by dimensions' setting prevents the creation of multiple alerts per dimension value, grouping all log entries into a single alert instance.
Generates a single notification instead of separate notifications per dimension value.

Anahtar Kavram

Orchestrating Azure Monitor alerts involves choosing correct delivery channels, managing notifications using Alert Processing Rules, securing webhook actions, and configuring aggregation properties.
Tahmini Süre:3m 0s
Bu soruyu puanla

Konular

Azure Monitor Alerts and Action Groups

Bu konudan daha fazla soru