Azure Monitoring and Governance Design Flashcards

What is the purpose of diagnostic settings in Azure Monitor?

Answer: To route resource logs and metrics to a Log Analytics Workspace, Event Hub, or Storage Account

Diagnostic settings configure where Azure resource platform logs and metrics are sent — to a Log Analytics Workspace for querying, an Event Hub for streaming, or a Storage Account for archival.

Which Microsoft Defender for Cloud feature provides a security posture score and prioritized recommendations based on the Azure Security Benchmark?

Answer: Cloud Security Posture Management (CSPM)

CSPM in Microsoft Defender for Cloud continuously assesses your Azure resources against the Azure Security Benchmark and provides a Secure Score reflecting your overall security posture.

Which Azure Monitor alert type evaluates log query results on a schedule and triggers when the query returns results matching a defined threshold?

Answer: Log Search Alert

Log Search Alerts run a KQL query against a Log Analytics Workspace on a defined schedule and trigger when the result set meets a threshold condition, enabling complex log-based alerting.

An organization wants to prevent resource deployments that violate compliance policies at the time of deployment. Which Azure Policy effect should be used?

Answer: Deny

The Deny effect in Azure Policy prevents the deployment of non-compliant resources at the ARM layer, stopping policy violations before resources are created or modified.

Which Azure tool allows you to visualize and query your entire Azure resource inventory and their relationships using a graph-based query language?

Answer: Azure Resource Graph

Azure Resource Graph enables fast, complex queries across all your Azure subscriptions using the Kusto Query Language (KQL) to explore resource properties and relationships at scale.

Which Azure Monitor feature allows you to create rich, interactive reports that combine multiple data sources including metrics, logs, and workbooks from different Azure services?

Answer: Azure Monitor Workbooks

Azure Monitor Workbooks are interactive documents that combine text, queries, metrics, and parameters into rich visual reports, supporting multiple data sources and dynamic content.