AZ-305 Azure Monitoring and Logging Design 3

Question 1

You need to stream Azure Monitor logs in near-real-time to Microsoft Sentinel for SIEM analysis. Which Azure service is the recommended streaming pipeline?

Accepted Answer

Azure Event Hubs

Answer

Azure Service Bus

Answer

Azure Storage Queue

Answer

Azure Relay

Question 2

A Log Analytics workspace is retaining large volumes of historical log data for compliance purposes, causing high costs. What is the most cost-effective way to retain this data long-term?

Accepted Answer

Use the Log Analytics archive tier for long-term low-cost retention

Answer

Delete data older than 90 days and recollect if needed

Answer

Export logs to Azure SQL Database for cold storage

Answer

Move the workspace to a lower-cost Azure region

Question 3

You need to automatically scale a Virtual Machine Scale Set based on a custom business metric published to Azure Monitor from your application. Which service manages this autoscale logic?

Accepted Answer

Azure Monitor autoscale

Answer

Azure Load Balancer health probes

Answer

Azure Traffic Manager routing

Answer

Azure Automation State Configuration

Question 4

Your team needs to run a single query to find all Azure storage accounts missing soft delete protection across 20 subscriptions. Which service is best suited for this?

Accepted Answer

Azure Resource Graph

Answer

Azure Monitor Log Analytics workspace

Answer

Azure Policy compliance dashboard

Answer

Azure Advisor recommendations

Question 5

You need to ensure that diagnostic data sent from on-premises-connected VMs to a Log Analytics workspace does not traverse the public internet. Which Azure feature should you implement?

Accepted Answer

Azure Private Link for Azure Monitor (AMPLS)

Answer

VPN Gateway with forced tunneling

Answer

Service Endpoint for Log Analytics

Answer

ExpressRoute with BGP filtering

Question 6

You need to provide stakeholders with personalized recommendations to reduce Azure spending, improve reliability, and address security vulnerabilities without building custom queries. Which service should you use?

Accepted Answer

Azure Advisor

Answer

Azure Monitor alerts

Answer

Microsoft Defender for Cloud alerts

Answer

Azure Policy initiatives

Question 7

Your organization needs a cloud-native SIEM solution with built-in SOAR capabilities to detect threats, investigate incidents, and automate responses across Azure and hybrid environments. Which Microsoft service should you deploy?

Accepted Answer

Microsoft Sentinel

Answer

Azure Monitor with workbooks

Answer

Microsoft Defender for Cloud (Defender plans)

Answer

Azure Security Center (legacy)