AZ-304 Azure Monitoring and Governance Design 2

Question 1

What is the purpose of diagnostic settings in Azure Monitor?

Accepted Answer

To route resource logs and metrics to a Log Analytics Workspace, Event Hub, or Storage Account

Answer

Diagnostic settings configure where Azure resource platform logs and metrics are sent — to a Log Analytics Workspace for querying, an Event Hub for streaming, or a Storage Account for archival.

Question 2

Which Microsoft Defender for Cloud feature provides a security posture score and prioritized recommendations based on the Azure Security Benchmark?

Accepted Answer

Cloud Security Posture Management (CSPM)

Answer

CSPM in Microsoft Defender for Cloud continuously assesses your Azure resources against the Azure Security Benchmark and provides a Secure Score reflecting your overall security posture.

Question 3

Which Azure Monitor alert type evaluates log query results on a schedule and triggers when the query returns results matching a defined threshold?

Accepted Answer

Log Search Alert

Answer

Log Search Alerts run a KQL query against a Log Analytics Workspace on a defined schedule and trigger when the result set meets a threshold condition, enabling complex log-based alerting.

Question 4

An organization wants to prevent resource deployments that violate compliance policies at the time of deployment. Which Azure Policy effect should be used?

Accepted Answer

Deny

Answer

The Deny effect in Azure Policy prevents the deployment of non-compliant resources at the ARM layer, stopping policy violations before resources are created or modified.

Question 5

Which Azure tool allows you to visualize and query your entire Azure resource inventory and their relationships using a graph-based query language?

Accepted Answer

Azure Resource Graph

Answer

Azure Resource Graph enables fast, complex queries across all your Azure subscriptions using the Kusto Query Language (KQL) to explore resource properties and relationships at scale.

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 Azure Monitoring and Governance Design 2