exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 6 question 18 discussion

Actual exam question from Microsoft's AZ-104
Question #: 18
Topic #: 6
[All AZ-104 Questions]

You have an Azure virtual machine named VM1.
Azure collects events from VM1.
You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1.
Which target resource should you monitor in the alert rule?

  • A. virtual machine extension
  • B. virtual machine
  • C. metric alert
  • D. Azure Log Analytics workspace
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
mlantonis
Highly Voted 3 years, 6 months ago
Correct Anser: D For the first step to create the new alert tule, under the Create Alert section, you are going to select your Log Analytics workspace as the resource, since this is a log based alert signal. The log data goes to the analytics workspace and it is from there that the alert is triggered. Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/configure-azure-monitor
upvoted 85 times
Hims001
1 year, 9 months ago
Where have you selected the source(VM) in the process?
upvoted 1 times
ppolychron
1 year, 6 months ago
First you enable the Azure Monitor Agent (Not the Log Analytics agent since it will be deprecated by August 2024) for the VM you want (VM->Monitoring->Logs). Then Create Data collection rule: -Data sources : Select the Windows Event Logs you want. Destination, the log analytics workspace you want -Resources: Select resource types, Virtual Machines
upvoted 2 times
...
...
...
fedztedz
Highly Voted 3 years, 10 months ago
Answer is correct D
upvoted 39 times
...
2d153f5
Most Recent 6 days, 5 hours ago
Selected Answer: D
Logs are in the the analytics workspace.
upvoted 1 times
...
SeMo0o0o0o
2 months ago
Selected Answer: D
D is correct
upvoted 2 times
...
WeepingMaplte
6 months, 2 weeks ago
Selected Answer: B
Question seems to be outdated now. The answer will be B. https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent?tabs=portal
upvoted 1 times
...
Hispan
8 months, 2 weeks ago
chatgpt: When creating an alert rule in Azure Monitor to notify an administrator about errors logged in the System event log of a virtual machine, the target resource you should monitor is the virtual machine itself (option B) 1. The alert rule will trigger based on events from the specified resource, in this case, VM1. By monitoring the virtual machine directly, you can efficiently detect and respond to any system-level issues or errors. Remember that the virtual machine extension (option A) is typically used for adding additional functionality or features to a virtual machine, while the metric alert (option C) focuses on specific performance metrics. The Azure Log Analytics workspace (option D) is used for collecting, analyzing, and visualizing log data but is not directly related to alerting based on specific events in the system event log of a virtual machine 12. Therefore, choose option B (virtual machine) as the target resource for your alert rule.
upvoted 1 times
...
man_ure
10 months, 1 week ago
in exam 25/1/2024
upvoted 3 times
...
PhoenixAscending
10 months, 1 week ago
Selected Answer: D
This was on my exam. The suggested answer to the question is correct.
upvoted 1 times
...
Exams_Prep_2021
11 months, 2 weeks ago
in exam 26/12/2023
upvoted 2 times
...
Andreas_Czech
1 year, 5 months ago
Selected Answer: D
it's asking for the Target resource, so VM is wrong (the VM Logs are the Source of this Alert)
upvoted 2 times
...
Madbo
1 year, 8 months ago
B. Virtual machine. Since the goal is to monitor the System event log of VM1, the target resource that should be monitored in the alert rule is the virtual machine itself (option B). This will enable Azure Monitor to continuously monitor the event logs on the virtual machine and trigger the alert rule when an error is detected. Option A (virtual machine extension) is incorrect as it is used to configure additional features or settings on the virtual machine. Option C (metric alert) is incorrect as it is used to monitor performance metrics of Azure resources, such as CPU utilization, and not event logs. Option D (Azure Log Analytics workspace) is also incorrect as it is used for collecting, analyzing, and visualizing data from multiple sources, including Azure resources and other log sources, but it is not used for setting up alert rules on a specific virtual machine.
upvoted 3 times
...
Hims001
1 year, 9 months ago
If we create an Alert Rule under a resource, target resource type becomes the type of the resource. If we create an Alert Rule from Azure Monitor, Azure provides option to select a Target resource. As question says to create an Alert Rule for VM1, Target resource type becomes "Virtual Machine". Hence. answer is "B". Try creating one from Azure portal to get correct answer on your own.
upvoted 3 times
...
CyberKelev
1 year, 9 months ago
Selected Answer: B
the correct answer is B. virtual machine.
upvoted 1 times
...
AndreaStack
1 year, 10 months ago
Selected Answer: D
D correct!
upvoted 2 times
...
er101q
1 year, 10 months ago
B. virtual machine. You should monitor the virtual machine because it is the source of the events being collected by Azure, specifically the System event log of VM1. By creating an alert rule on the virtual machine, you can be notified when an error is logged in the System event log, allowing you to take appropriate action.
upvoted 3 times
bsaksham
1 year, 8 months ago
correct i agree!!!
upvoted 1 times
...
...
klexams
2 years, 1 month ago
VM's event log sends data to LA workspace. Alert is created based on LAW as the source. D. Azure Log Analytics workspace
upvoted 3 times
...
Stanly_Az
2 years, 2 months ago
This question was there on 09/16/2022
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago