Exam AZ-104 topic 6 question 58 discussion

I feel like Azure has a lot of services (some of them nested) that do the same thing and cause confusion because they have differing names

Data Collection End Point https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-endpoint-overview?tabs=portal

It's a data collection endpoint

The process of collecting logs from windows virtual machines. 1. Create a Data Collection Endpoint (DCE) (this is the first step) 2. Create a Data Collection Rule (DCR) targeting: Custom log path (e.g., C:\inetpub\logs\LogFiles\W3SVC1) Destination: Log Analytics workspace 3. Associate the DCR to the VMs. Ensure Azure Monitor Agent is installed on all VMs (already done per question) Why diagnostic setting is wrong - It is applied to PaaS resources, not for collecting custom logs from IaaS VMs.

To collect custom logs like IIS logs using the Azure Monitor Agent (AMA), the following are required: Data Collection Rule (DCR) – defines what data to collect. Data Collection Endpoint (DCE) – required for AMA to route data to destinations like Log Analytics. AMA installed on the VMs – already done, per the question. Log Analytics workspace – for storing the logs.

Looks like there are a lot of old answers and nowadays you need a data collection rule for it and hence a data collection endpoint. So answer should be A. Resource: https://learn.microsoft.com/en-us/azure/azure-monitor/vm/data-collection-iis

But for IIS logs it is data collection endpoint only

Data Collection Endpoint: Used for custom data collection endpoints. Diagnostic Settings: Used to configure the collection of logs and metrics from virtual machines. So, correct is C: Diagnostic Settings

I was inclined to say A as well, but the link others are providing explicitly says you only need a data collection endpoint if you plan on using Azure Monitor Private Links which this question does not specify. That this detail is left out of the question alone would be a good reason to avoid that answer. However, there is some support for answer C here: https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/create-diagnostic-settings?tabs=portal "Logs and metrics to route: For logs, either choose a category group or select the individual checkboxes for each category of data you want to send to the destinations specified later. The list of categories varies for each Azure service. Select AllMetrics if you want to store metrics in Azure Monitor Logs too."

DCE. I just came here to add my two cents. I tested this and it's not C. You don't require this. You just create a DCE in the same region and then on the DCR Configuration Basic Settings page you have to select the DCE. Then you can enable IIS logs collection. Dont need enable anything.

A data collection endpoint (DCE) only if you plan to use Azure Monitor Private Links. Ref: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-iis

To collect IIS logs from each virtual machine and store them in a Log Analytics workspace, the first thing you need to configure is: C. Diagnostic settings Explanation: Diagnostic settings: Diagnostic settings in Azure allow you to specify which logs and metrics should be collected from your resources and where they should be sent (e.g., to a Log Analytics workspace, an event hub, or a storage account). For collecting IIS logs, you will configure the diagnostic settings on each virtual machine to send the IIS logs to the Log Analytics workspace.

The first thing you should configure is C. Diagnostic settings. In Azure, to collect IIS logs from each virtual machine and store them in a Log Analytics workspace, you would need to configure the diagnostic settings. This allows you to choose the specific data you want to collect, such as IIS logs, and the destination where you want to store this data, such as a Log Analytics workspace.

The correct answer is A Ref: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-iis

A is right

Option C: Diagnostic settings To collect and forward logs to Log Analytics, you should configure diagnostic settings on each virtual machine. Diagnostic settings allow you to collect various types of data, including IIS logs, and send them to a Log Analytics workspace.

A. DCE is correct See: "Collect IIS logs with Azure Monitor Agent" https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-iis