AZ-305 Azure Monitoring and Logging Design 1 — Questions and Answers
Question 1: You need to centralize log collection from multiple Azure subscriptions for cross-subscription analysis. Which Azure resource should you deploy?
- Azure Event Hub namespace
- Log Analytics workspace (Correct answer)
- Azure Storage account (hot tier)
- Azure Service Bus namespace
Correct answer: Log Analytics workspace
A Log Analytics workspace is the central repository for collecting, storing, and querying log data from multiple Azure resources and subscriptions using KQL.
Question 2: You need an alert that fires when CPU utilization on a VM exceeds 80% for five consecutive minutes. Which Azure Monitor alert type should you use?
- Log search alert
- Activity log alert
- Metric alert (Correct answer)
- Smart detection alert
Correct answer: Metric alert
Metric alerts evaluate numeric resource metrics at regular intervals and trigger when a threshold is crossed, making them ideal for CPU utilization monitoring.
Question 3: An application team wants to track user sessions, page load times, and unhandled exceptions for their Azure-hosted web app. Which service best meets this requirement?
- Azure Log Analytics
- Azure Application Insights (Correct answer)
- Azure Network Watcher
- Azure Service Health
Correct answer: Azure Application Insights
Azure Application Insights is an APM service built for web applications, providing end-to-end tracing, user behavior analytics, performance monitoring, and exception tracking.
Question 4: You need to ensure that diagnostic settings are automatically configured on all newly created Azure resources to forward logs to a Log Analytics workspace. Which approach should you implement?
- Azure Automation runbook on a schedule
- Azure Policy with deployIfNotExists effect (Correct answer)
- Azure Logic Apps triggered by Activity Log
- Azure Monitor alert with auto-remediation
Correct answer: Azure Policy with deployIfNotExists effect
Azure Policy with the deployIfNotExists effect automatically deploys diagnostic settings to compliant resources, including newly created ones, without manual intervention.
Question 5: Your organization needs to receive SMS and email notifications when an Azure regional outage affects resources in your subscription. Which service should you configure?
- Azure Monitor metric alerts with action groups
- Azure Advisor recommendations
- Azure Service Health alerts (Correct answer)
- Azure Network Watcher connection monitor
Correct answer: Azure Service Health alerts
Azure Service Health provides personalized alerts for Azure platform issues, planned maintenance, and health advisories affecting your specific resources and subscriptions.
Question 6: What is the default interactive data retention period for a Log Analytics workspace before data must be archived or deleted?
- 30 days
- 60 days
- 90 days (Correct answer)
- 180 days
Correct answer: 90 days
The default interactive retention period for a Log Analytics workspace is 90 days; data can be extended up to 730 days for interactive use or archived at lower cost beyond that.
Question 7: You want to reuse the same set of email, SMS, and webhook notifications across multiple alert rules. Which Azure Monitor feature enables this?
- Alert processing rules
- Action groups (Correct answer)
- Notification templates
- Alert rule sets
Correct answer: Action groups
Action groups are reusable collections of notification and action preferences (email, SMS, webhook, ITSM, etc.) that can be referenced by multiple alert rules.
AZ-305 Azure Monitoring and Logging Design 1
You need to centralize log collection from multiple Azure subscriptions for cross-subscription analysis.
Which Azure resource should you deploy?