AZ-305 Azure Monitoring and Logging Design 2

Question 1

You need to query Azure Monitor logs to identify all failed authentication events on your VMs over the past 24 hours. Which query language should you use?

Accepted Answer

Kusto Query Language (KQL)

Answer

T-SQL

Answer

PowerShell DSL

Answer

GraphQL

Question 2

You need to create interactive, shareable visual reports that combine Azure Monitor metrics, logs, and Azure Resource Graph data in a single view. Which feature should you use?

Accepted Answer

Azure Monitor workbooks

Answer

Azure Monitor dashboards

Answer

Power BI Embedded reports

Answer

Azure Metrics Explorer

Question 3

You need to monitor node health, pod resource usage, and container logs for an AKS cluster using Azure Monitor. Which solution should you enable?

Accepted Answer

Container insights

Answer

Azure Monitor for VMs

Answer

Azure Monitor for Networks

Answer

Application Insights SDK

Question 4

You need to capture network packet-level traffic to and from a VM's NIC for forensic security analysis. Which Azure Network Watcher feature should you use?

Accepted Answer

Packet capture

Answer

Connection monitor

Answer

NSG flow logs

Answer

IP flow verify

Question 5

Your security team needs to determine who made changes to Azure resources, when those changes occurred, and from which IP address. Which log source should they query?

Accepted Answer

Azure Activity Log

Answer

Azure Diagnostics logs (resource logs)

Answer

Application Insights request telemetry

Answer

VM performance counters

Question 6

You need to collect VM performance metrics and logs using a modern, centrally managed agent that supports Data Collection Rules (DCRs). Which agent should you deploy?

Accepted Answer

Azure Monitor Agent (AMA)

Answer

Microsoft Monitoring Agent (MMA)

Answer

OMS agent for Linux

Answer

Windows Diagnostics extension (WAD)

Question 7

You need to diagnose why two Azure VMs cannot communicate with each other despite being in the same VNet. Which Azure Network Watcher tool should you use first?

Accepted Answer

Connection troubleshoot

Answer

Traffic Analytics

Answer

Packet capture

Answer

IP flow verify