AZ-305 Azure Monitoring and Logging Design 2

Question 1

You need to query Azure Monitor logs to identify all failed authentication events on your VMs over the past 24 hours. Which query language should you use?

Accepted Answer

Kusto Query Language (KQL)

Answer

Kusto Query Language (KQL) is the native query language for Azure Monitor Log Analytics, designed for fast exploration and analysis of large log datasets.

Question 2

You need to create interactive, shareable visual reports that combine Azure Monitor metrics, logs, and Azure Resource Graph data in a single view. Which feature should you use?

Accepted Answer

Azure Monitor workbooks

Answer

Azure Monitor workbooks provide a flexible, interactive canvas that can combine data from multiple sources—metrics, logs, Azure Resource Graph—into parameterized reports for sharing.

Question 3

You need to monitor node health, pod resource usage, and container logs for an AKS cluster using Azure Monitor. Which solution should you enable?

Accepted Answer

Container insights

Answer

Container insights (formerly Azure Monitor for containers) provides performance and health monitoring specifically for AKS nodes, pods, and containers, collecting metrics and logs automatically.

Question 4

You need to capture network packet-level traffic to and from a VM's NIC for forensic security analysis. Which Azure Network Watcher feature should you use?

Accepted Answer

Packet capture

Answer

Packet capture in Azure Network Watcher records raw network packets to and from a VM's NIC, stored in Azure Storage or the VM's disk for detailed forensic analysis.

Question 5

Your security team needs to determine who made changes to Azure resources, when those changes occurred, and from which IP address. Which log source should they query?

Accepted Answer

Azure Activity Log

Answer

The Azure Activity Log records all control-plane operations on Azure resources, capturing the caller identity, source IP, timestamp, and operation outcome for governance and auditing.

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 Azure Monitoring and Logging Design 2