AZ-305 Azure Monitoring and Logging Design 3

Question 1

You need to stream Azure Monitor logs in near-real-time to Microsoft Sentinel for SIEM analysis. Which Azure service is the recommended streaming pipeline?

Accepted Answer

Azure Event Hubs

Answer

Azure Event Hubs is the recommended high-throughput streaming pipeline for exporting Azure Monitor logs to external systems like Microsoft Sentinel and third-party SIEMs.

Question 2

A Log Analytics workspace is retaining large volumes of historical log data for compliance purposes, causing high costs. What is the most cost-effective way to retain this data long-term?

Accepted Answer

Use the Log Analytics archive tier for long-term low-cost retention

Answer

The Log Analytics archive tier retains data beyond the interactive period at significantly lower cost, meeting compliance requirements while eliminating the need to query archived data frequently.

Question 3

You need to automatically scale a Virtual Machine Scale Set based on a custom business metric published to Azure Monitor from your application. Which service manages this autoscale logic?

Accepted Answer

Azure Monitor autoscale

Answer

Azure Monitor autoscale supports scaling rules based on any metric available in Azure Monitor, including custom metrics published by applications, enabling business-driven scaling decisions.

Question 4

Your team needs to run a single query to find all Azure storage accounts missing soft delete protection across 20 subscriptions. Which service is best suited for this?

Accepted Answer

Azure Resource Graph

Answer

Azure Resource Graph enables fast, complex queries over Azure resource properties and configurations across multiple subscriptions at scale, making it ideal for compliance inventory checks.

Question 5

You need to ensure that diagnostic data sent from on-premises-connected VMs to a Log Analytics workspace does not traverse the public internet. Which Azure feature should you implement?

Accepted Answer

Azure Private Link for Azure Monitor (AMPLS)

Answer

Azure Monitor Private Link Scope (AMPLS) uses Azure Private Link to connect your virtual network to Azure Monitor endpoints via private endpoints, keeping all monitoring traffic off the public internet.

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 Azure Monitoring and Logging Design 3