Hard1 markMultiple Choice
Domain 1.1: Logging and MonitoringDomain 1Azure MonitorAzure ArcCost Optimization

AZ-305 · Question 02 · Domain 1.1: Logging and Monitoring

A healthcare organization has 500 on-premises Windows Server VMs and 300 Azure VMs. They are implementing Azure Monitor to collect performance counters and event logs across the entire hybrid environment.

The CIO has mandated a strict cost optimization policy. You need to design a monitoring solution that meets the following requirements:

  • Collect logs from both on-premises and Azure VMs.
  • Minimize data ingestion costs for non-critical event logs.
  • Ensure that on-premises VMs can be managed using Azure Policy.

Which THREE actions should you include in your recommendation? (Select THREE)

Answer options:

A.

Install the Log Analytics agent (MMA) on all VMs.

B.

Install the Azure Monitor Agent (AMA) on all VMs.

C.

Create Data Collection Rules (DCRs) to filter events before ingestion.

D.

Configure a Log Analytics workspace daily cap.

E.

Onboard the on-premises VMs to Azure Arc.

How to approach this question

Identify the modern agent for Azure Monitor, the mechanism for filtering logs, and the service that extends Azure management to on-premises.

Full Answer

To manage on-premises VMs with Azure Policy, they must be onboarded to Azure Arc. To collect logs and minimize costs, the Azure Monitor Agent (AMA) must be used in conjunction with Data Collection Rules (DCRs). DCRs allow you to specify exactly which events to collect (filtering), reducing ingestion costs. The legacy Log Analytics agent cannot filter Windows event logs at the source.

Common mistakes

Selecting the daily cap option, which is a blunt instrument that stops all logging rather than filtering.

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 2

55 questions · hints · full answers · grading

More questions from this exam