Question 1 of 25
Your company's Azure subscription includes an Azure Log Analytics workspace. Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers. You must configure alerts based on the information gathered by the Azure Log Analytics workspace. You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is resolved. You need to make use of the necessary signal type when creating the alert rules. Which of the following is the option you should use?
Show answer
How others answered
- C100%
Explanation
Signal types: * Activity Log ... includes service health records along with records on any configuration changes made to the resources (and is available to all Azure resources) * Audit Log ... contains the history of sign-in activity and audit trail of changes made within a particular tenant * Metric ... numerical values that are collected at regular intervals and describe some aspect of a system at a particular time * Application Log ... ? The Metrics feature can only store numeric data in a particular structure, whereas the Logs feature can store a variety of datatypes (each with its own structure). https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-overview https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/data-platform-metrics https://docs.microsoft.com/en-us/azure/azure-monitor/logs/data-platform-logs
Adapted from community discussion by MiraA · 2022-04-06 · 20 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.
Supporting references