Exam AZ-104 topic 6 question 18 discussion

Correct Anser: D For the first step to create the new alert tule, under the Create Alert section, you are going to select your Log Analytics workspace as the resource, since this is a log based alert signal. The log data goes to the analytics workspace and it is from there that the alert is triggered. Reference: https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/configure-azure-monitor

Answer is correct D

Logs are in the the analytics workspace.

D is correct

Question seems to be outdated now. The answer will be B. https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent?tabs=portal

chatgpt: When creating an alert rule in Azure Monitor to notify an administrator about errors logged in the System event log of a virtual machine, the target resource you should monitor is the virtual machine itself (option B) 1. The alert rule will trigger based on events from the specified resource, in this case, VM1. By monitoring the virtual machine directly, you can efficiently detect and respond to any system-level issues or errors. Remember that the virtual machine extension (option A) is typically used for adding additional functionality or features to a virtual machine, while the metric alert (option C) focuses on specific performance metrics. The Azure Log Analytics workspace (option D) is used for collecting, analyzing, and visualizing log data but is not directly related to alerting based on specific events in the system event log of a virtual machine 12. Therefore, choose option B (virtual machine) as the target resource for your alert rule.

in exam 25/1/2024

This was on my exam. The suggested answer to the question is correct.

in exam 26/12/2023

it's asking for the Target resource, so VM is wrong (the VM Logs are the Source of this Alert)

B. Virtual machine. Since the goal is to monitor the System event log of VM1, the target resource that should be monitored in the alert rule is the virtual machine itself (option B). This will enable Azure Monitor to continuously monitor the event logs on the virtual machine and trigger the alert rule when an error is detected. Option A (virtual machine extension) is incorrect as it is used to configure additional features or settings on the virtual machine. Option C (metric alert) is incorrect as it is used to monitor performance metrics of Azure resources, such as CPU utilization, and not event logs. Option D (Azure Log Analytics workspace) is also incorrect as it is used for collecting, analyzing, and visualizing data from multiple sources, including Azure resources and other log sources, but it is not used for setting up alert rules on a specific virtual machine.

If we create an Alert Rule under a resource, target resource type becomes the type of the resource. If we create an Alert Rule from Azure Monitor, Azure provides option to select a Target resource. As question says to create an Alert Rule for VM1, Target resource type becomes "Virtual Machine". Hence. answer is "B". Try creating one from Azure portal to get correct answer on your own.

the correct answer is B. virtual machine.

D correct!

B. virtual machine. You should monitor the virtual machine because it is the source of the events being collected by Azure, specifically the System event log of VM1. By creating an alert rule on the virtual machine, you can be notified when an error is logged in the System event log, allowing you to take appropriate action.

VM's event log sends data to LA workspace. Alert is created based on LAW as the source. D. Azure Log Analytics workspace

This question was there on 09/16/2022