Suggested Answer:
You would use the Azure Activity Log, not Access Control to view which user turned off a specific virtual machine during the last 14 days. Activity logs are kept for 90 days. You can query for any range of dates, as long as the starting date isn't more than 90 days in the past. In this question, we would create a filter to display shutdown operations on the virtual machine in the last 14 days. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-audit
Answer: Azure Activity Log. You would use the Azure Activity Log, not Azure Monitor to view which user turned off a specific virtual machine during the last 14 days. Activity logs are kept for 90 days. You can query for any range of dates, as long as the starting date isn't more than 90 days in the past.
While Azure Activity Log is focused on logging and tracking operations and changes within Azure resources for auditing and monitoring purposes, Azure Event Hub is geared towards ingesting, processing, and managing large volumes of streaming event data from various sources for real-time analytics and processing. Event Hub is typically used as a source for SIEM solution to provide the data for analysis.
This section is not available anymore. Please use the main Exam Page.AZ-900 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
AZ900Rocks
Highly Voted 3 years, 5 months agoyesican
Highly Voted 3 years, 6 months agomsmt
Most Recent 1 year, 3 months agokamal_004
2 years agoSSB112
2 years, 9 months agonhlegend
1 year, 11 months agoYomzie
7 months, 1 week agosdokmak
2 years, 7 months agoSWOng07
3 years, 5 months agoFiggy_123
3 years, 5 months ago