Azure Monitoring and Governance Design Flashcards

Which Azure service provides a centralized solution for collecting, analyzing, and acting on telemetry data from Azure and on-premises environments?

Answer: Azure Monitor

Azure Monitor is the unified monitoring platform that collects metrics and logs from Azure resources, on-premises systems, and other clouds, enabling alerting and analytics.

An architect needs to enforce that all Azure resources in a subscription are deployed only in approved regions. Which Azure service enforces this policy?

Answer: Azure Policy

Azure Policy allows you to define and enforce rules like allowed resource locations, automatically denying or auditing non-compliant deployments across your subscriptions.

Which Azure Monitor component stores structured log data and allows you to query it using Kusto Query Language (KQL)?

Answer: Log Analytics Workspace

Log Analytics Workspace is the data repository within Azure Monitor that stores logs and enables powerful ad-hoc analysis using the Kusto Query Language.

Which Azure service provides proactive recommendations to improve cost, security, reliability, and performance based on analysis of your Azure resources?

Answer: Azure Advisor

Azure Advisor analyzes your Azure resource configurations and usage patterns to provide personalized, actionable recommendations across cost, security, reliability, performance, and operational excellence pillars.

Which Azure Monitor feature captures a complete picture of an application's performance including request rates, failures, and dependencies across distributed microservices?

Answer: Application Insights

Application Insights provides distributed tracing, live metrics, dependency tracking, and performance analytics for application code running on Azure or on-premises.

Which Azure governance feature bundles Azure Policy assignments, RBAC assignments, and ARM templates into a repeatable, version-controlled package for deploying compliant environments?

Answer: Azure Blueprints

Azure Blueprints compose policy assignments, role assignments, resource groups, and ARM templates into a tracked package that can be deployed and updated across multiple subscriptions.