ExpertAZ-305 · Question 01 · Domain 1.1: Logging and Monitoring
Contoso Ltd has 50 subscriptions across 3 business units. Each business unit manages its own IT operations. You are designing a logging and monitoring solution using Azure Monitor and Log Analytics.
The company requires that each business unit has full control over its own logs, but the central security team must be able to query security logs across all business units simultaneously. You need to minimize administrative overhead and cost.
Which Log Analytics workspace architecture should you recommend?
Contoso Ltd has 50 subscriptions across 3 business units. Each business unit manages its own IT operations. You are designing a logging and monitoring solution using Azure Monitor and Log Analytics.
The company requires that each business unit has full control over its own logs, but the central security team must be able to query security logs across all business units simultaneously. You need to minimize administrative overhead and cost.
Which Log Analytics workspace architecture should you recommend?
Answer options:
Create a single centralized Log Analytics workspace for the entire company. Use workspace-level RBAC to restrict access.
Create one Log Analytics workspace per business unit. Grant the central security team Reader access to all workspaces and use cross-workspace queries.
Create one Log Analytics workspace per subscription (50 total). Use Azure Lighthouse for central management.
Create one Log Analytics workspace per business unit. Configure continuous export to a central Azure Data Lake Storage Gen2 account for the security team.
How to approach this question
Full Answer
Common mistakes
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 5
55 questions · hints · full answers · grading