Noos
PT EN
RAN-AZ900-00291
Ranvier · AZ900

Exam AZ900 Topics: management Difficulty: medium

Investigators at a bank are reconstructing a security incident. They need a single experience where they can write queries that combine log data collected from virtual machines, storage accounts, and the bank's web application telemetry — all stored by Azure Monitor. Which capability should the investigators use?

Options (Reading Mode) Click to filter discussion →
  1. A. Application Insights, which focuses on the performance and usage of the bank's web application
  2. B. Azure Monitor Metrics, which charts numerical values sampled at regular intervals over time
  3. C. Azure Advisor, which provides security recommendations for the resources the bank has deployed
  4. D. Log Analytics, where queries run across the logs Azure Monitor collects from multiple sources
Reveal answer

Correct answer: Log Analytics, where queries run across the logs Azure Monitor collects from multiple sources

Reference: https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-overview

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (D): Log Analytics, where queries run across the logs Azure Monitor collects from multiple sources

Ranvier · AZ900

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.