You are designing a monitoring strategy for a new Azure deployment consisting of App Service, Azure SQL Database, and Key Vault. You need to ensure that all resource-level diagnostic logs are automatically collected and sent to a central Log Analytics workspace without manual intervention when new resources are created. What should you use?

Answer options:

Azure Policy with DeployIfNotExists effect.

Azure Monitor Action Groups.

Azure Automation runbooks scheduled daily.

Azure Resource Graph queries.

How to approach this question

Identify the governance tool used to enforce and automate resource configurations at scale.

Full Answer

A.Azure Policy with DeployIfNotExists effect.✓ Correct

Azure Policy with DeployIfNotExists effect.

Azure Policy with the DeployIfNotExists effect is the standard architectural pattern for ensuring all resources automatically send logs to a central workspace.

Common mistakes

Choosing Automation runbooks, which is an operational approach rather than a governance approach.

Question 03 All questions Question 05

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 6

55 questions · hints · full answers · grading

More questions from this exam

Q01Contoso Ltd is a global manufacturing company with 50,000 employees. They operate a mix of on-pre...Medium Q02A financial institution has 500 Windows Server VMs on-premises and 200 VMs in Azure. They need to...Hard Q03An enterprise uses Azure Sentinel and Log Analytics. They ingest 500 GB of logs daily. The IT bud...Hard Q05A healthcare company uses Microsoft Entra ID (Azure AD). They need to implement a security policy...Medium Q06Your organization collaborates with 50 external partner companies. You need to grant partner empl...Hard

View all 55 questions →