AZ-400 Monitoring and Feedback 2 — Questions and Answers
Question 1: Which Azure Monitor feature allows you to create custom dashboards that combine metrics from multiple resources?
- Azure Monitor Workbooks (Correct answer)
- Log Analytics Workspace
- Application Insights Dashboard
- Azure Metrics Explorer
Correct answer: Azure Monitor Workbooks
Azure Monitor Workbooks provide flexible canvases for combining metrics, logs, and custom visualizations from multiple resources into a single interactive report.
Question 2: A team wants to detect anomalies in application performance automatically without setting static thresholds. Which Azure Monitor feature should they use?
- Static threshold alerts
- Dynamic threshold alerts (Correct answer)
- Log query alerts
- Activity log alerts
Correct answer: Dynamic threshold alerts
Dynamic threshold alerts use machine learning to automatically detect anomalies based on historical patterns, removing the need for manually configured static thresholds.
Question 3: What is the primary purpose of the Azure Monitor Agent (AMA) compared to the legacy Log Analytics Agent?
- AMA supports Windows only
- AMA uses Data Collection Rules for granular control over data collection (Correct answer)
- AMA requires a Log Analytics workspace
- AMA collects only performance counters
Correct answer: AMA uses Data Collection Rules for granular control over data collection
The Azure Monitor Agent uses Data Collection Rules (DCRs) to give fine-grained, centralized control over what data is collected and where it is sent.
Question 4: In Application Insights, what does the 'sampling' feature primarily help with?
- Increasing telemetry volume
- Reducing telemetry cost and storage while retaining statistical accuracy (Correct answer)
- Encrypting telemetry data
- Filtering out error telemetry
Correct answer: Reducing telemetry cost and storage while retaining statistical accuracy
Sampling reduces the volume of telemetry sent and stored to control costs while preserving statistical representativeness of the data.
Question 5: Which KQL operator would you use in Log Analytics to count the number of events grouped by a specific field?
- project
- summarize (Correct answer)
- extend
- where
Correct answer: summarize
The `summarize` operator aggregates rows and computes expressions such as `count()` grouped by one or more columns.
Question 6: A DevOps team needs to receive alerts when CPU utilization on any VM in a resource group exceeds 90% for 5 minutes. What alert scope should they configure?
- Individual VM resource
- Subscription
- Resource group (Correct answer)
- Management group
Correct answer: Resource group
Setting the alert scope to the resource group lets a single alert rule monitor all VMs within that group without creating per-VM rules.
Question 7: Which Application Insights feature captures detailed diagnostic data only when a request fails or is slow, to minimize overhead?
- Profiler
- Snapshot Debugger (Correct answer)
- Adaptive sampling
- Live Metrics Stream
Correct answer: Snapshot Debugger
Snapshot Debugger automatically collects debug snapshots when exceptions occur, letting developers inspect the call stack and variables at the point of failure.
AZ-400 Monitoring and Feedback 2
Which Azure Monitor feature allows you to create custom dashboards that combine metrics from multiple resources?