ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 6 question 24 discussion

Actual exam question from Microsoft's AZ-104
Question #: 24
Topic #: 6
[All AZ-104 Questions]

HOTSPOT -
You have an Azure subscription that contains the resources shown in the following table.

You plan to create a data collection rule named DCR1 in Azure Monitor.
Which resources can you set as data sources in DCR1, and which resources can you set as destinations in DCR1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: VM1 only -
A virtual machine may have an association to multiple DCRs, and a DCR may have multiple virtual machines associated to it.
In the Resources tab, add the resources (virtual machines, virtual machine scale sets, Arc for servers) that should have the Data Collection Rule applied.

Box 2: Workspace1 only -
On the Destination tab, add one or more destinations for the data source. You can select multiple destinations of same of different types, for instance multiple Log
Analytics workspaces (i.e. "multi-homing").
Note: The Data Collection Rules (or DCR) improve on a few key areas of data collection from VMs including like better control and scoping of data collection (e.g. collect from a subset of VMs for a single workspace), collect once and send to both Log Analytics and Azure Monitor Metrics, send to multiple workspaces (multi- homing for Linux), improved Windows event filtering, and improved extension management.
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent
by northstar88 at Sept. 2, 2022, 10 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Mev4953
Highly Voted 2 years, 5 months ago
Correct answer. Tested in Lab. First: You can only choose VM Second: Only Workspace
upvoted 56 times
Anarchira
2 years, 5 months ago
i found this reference, https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-rule-overview I think that only VM could be use too
upvoted 5 times
...
KingChuang
2 years, 3 months ago
Agree. Ref: https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection
upvoted 2 times
KingChuang
2 years, 3 months ago
In ref doc. Source from Azure Monitor Agent(VM)、REST API and Azure Resource. Confused about other items. But your LAB test has only VM.
upvoted 1 times
KingChuang
2 years, 3 months ago
I understand, it must be LOG-related REST API and Azure resources
upvoted 1 times
...
...
...
...
klexams
Highly Voted 2 years, 4 months ago
1. VM only. it uses Azure monitor agent which needs to be installed on a VM. 2. Workspace1 only. Data then gets sent to Workspace.
upvoted 13 times
...
[Removed]
Most Recent 5 months ago
CORRECT
upvoted 3 times
...
23169fd
9 months ago
Given answer is correct. Data collection rules can be used to collect data from VM using Azure Monitor Agent. The data collected can be sent to a Log Analytics Workspace for analysis and monitoring.
upvoted 1 times
...
Amir1909
11 months, 2 weeks ago
Given answer is right
upvoted 1 times
...
D1nk8887
1 year ago
1. VM1 only 2. Workspace1 and Storage 1 only My source for 2 is: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-send-data-to-event-hubs-and-storage?tabs=windows%2Cwindows-1 … but this is outside my expertise so please let me know why that doesn't apply to this case if I am wrong. In general, Azure Monitor can send to Storage for retention in case of later audit/review needs. I think the linked doc, above, sayd this is true for DCR, specifically, too.
upvoted 2 times
danlo
2 months, 3 weeks ago
Yes that seems to be a new preview feature. I would say for Q2: Workspace1 and Storage 1 only.
upvoted 1 times
...
...
Procurement
1 year, 10 months ago
When you create the rule in the azure portal you get the following info message: Pick a set of machines to collect data from. The Azure Monitor Agent will be automatically installed on virtual machines, scale sets, and Arc-enabled servers.
upvoted 1 times
...
zellck
2 years ago
1. VM1 only 2. Workspace1 only https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-rule-structure#datasources https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-rule-structure#destinations This section contains a declaration of all the destinations where the data will be sent. Only Log Analytics is currently supported as a destination. Each Log Analytics destination will require the full Workspace Resource ID, as well as a friendly name that will be used elsewhere in the DCR to refer to this workspace.
upvoted 5 times
...
DeBoer
2 years ago
Source needs to be either a VM or "something" that can send its logs to a REST API. A storage account or SQL database will not do that (AFAIK) https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-rule-overview Target needs to be a LA Workspace indeed, so that's an easy choice.
upvoted 1 times
...
dc2k79
2 years, 4 months ago
VM1 only Workspace1 only
upvoted 1 times
...
northstar88
2 years, 6 months ago
The destination is correct based on the following doc: https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-rule-structure#:~:text=Only%20Log%20Analytics%20is%20currently%20supported%20as%20a%20destination.
upvoted 4 times
danlo
2 months, 3 weeks ago
https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/data-collection-rule-structure#valid-destinations Destinations include blob storage/table storage
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago