AZ-304 Azure Monitoring and Governance Design 2 — Questions and Answers
Question 1: What is the purpose of diagnostic settings in Azure Monitor?
- To enable Azure Policy compliance evaluation
- To route resource logs and metrics to a Log Analytics Workspace, Event Hub, or Storage Account (Correct answer)
- To configure alerting thresholds on VMs
- To enable Azure Advisor recommendations
Correct answer: To route resource logs and metrics to a Log Analytics Workspace, Event Hub, or Storage Account
Diagnostic settings configure where Azure resource platform logs and metrics are sent — to a Log Analytics Workspace for querying, an Event Hub for streaming, or a Storage Account for archival.
Question 2: Which Microsoft Defender for Cloud feature provides a security posture score and prioritized recommendations based on the Azure Security Benchmark?
- Workload Protection Plans
- Cloud Security Posture Management (CSPM) (Correct answer)
- Just-in-Time VM Access
- Adaptive Application Controls
Correct answer: Cloud Security Posture Management (CSPM)
CSPM in Microsoft Defender for Cloud continuously assesses your Azure resources against the Azure Security Benchmark and provides a Secure Score reflecting your overall security posture.
Question 3: Which Azure Monitor alert type evaluates log query results on a schedule and triggers when the query returns results matching a defined threshold?
- Metric Alert
- Log Search Alert (Correct answer)
- Activity Log Alert
- Smart Detection Alert
Correct answer: Log Search Alert
Log Search Alerts run a KQL query against a Log Analytics Workspace on a defined schedule and trigger when the result set meets a threshold condition, enabling complex log-based alerting.
Question 4: An organization wants to prevent resource deployments that violate compliance policies at the time of deployment. Which Azure Policy effect should be used?
- Audit
- AuditIfNotExists
- Deny (Correct answer)
- DeployIfNotExists
Correct answer: Deny
The Deny effect in Azure Policy prevents the deployment of non-compliant resources at the ARM layer, stopping policy violations before resources are created or modified.
Question 5: Which Azure tool allows you to visualize and query your entire Azure resource inventory and their relationships using a graph-based query language?
- Azure Monitor Workbooks
- Azure Resource Graph (Correct answer)
- Azure Inventory (Log Analytics)
- Azure Service Map
Correct answer: Azure Resource Graph
Azure Resource Graph enables fast, complex queries across all your Azure subscriptions using the Kusto Query Language (KQL) to explore resource properties and relationships at scale.
Question 6: Which Azure Monitor feature allows you to create rich, interactive reports that combine multiple data sources including metrics, logs, and workbooks from different Azure services?
- Azure Dashboard
- Azure Monitor Workbooks (Correct answer)
- Azure Metrics Explorer
- Power BI only
Correct answer: Azure Monitor Workbooks
Azure Monitor Workbooks are interactive documents that combine text, queries, metrics, and parameters into rich visual reports, supporting multiple data sources and dynamic content.
AZ-304 Azure Monitoring and Governance Design 2
What is the purpose of diagnostic settings in Azure Monitor?