You are troubleshooting a security issue for an Azure Storage account.You enable the diagnostic logs for the storage account.What should you use to retrieve the diagnostics logs?
Answer(s): D
If you want to download the metrics for long-term storage or to analyze them locally, you must use a tool or write some code to read the tables. You must download the minute metrics for analysis. The tables do not appear if you list all the tables in your storage account, but you can access them directly by name.Many storage-browsing tools are aware of these tables and enable you to view them directly (see Azure Storage Client Tools for a list of available tools).Microsoft provides several graphical user interface (GUI) tools for working with the data in your Azure Storage account. All of the tools outlined in the following table are free.Note:There are several versions of this question in the exam. The questions in the exam have two different correct answers:1. Azure Storage Explorer2. AZCopyOther incorrect answer options you may see on the exam include the following:1. SQL query editor in Azure2. File Explorer in Windows3. Azure Monitor
https://docs.microsoft.com/en-us/azure/storage/common/storage-analytics-metrics?toc=%2fazure%2fstorage%2fblobs%2ftoc.json https://docs.microsoft.com/en-us/azure/storage/common/storage-explorers
You have an Azure subscription that contains the virtual machines shown in the following table.From Azure Security Center, you turn on Auto Provisioning.You deploy the virtual machines shown in the following table.On which virtual machines is the Microsoft Monitoring Agent installed?
When automatic provisioning is enabled, Security Center provisions the Microsoft Monitoring Agent on all supported Azure VMs and any new ones that are created.Supported Operating systems include: Ubuntu 14.04 LTS (x86/x64), 16.04 LTS (x86/x64), and 18.04 LTS (x64) and Windows Server 2008 R2, 2012, 2012 R2,2016, version 1709 and 1803.
https://docs.microsoft.com/en-us/azure/security-center/security-center-faq
SIMULATION You need to email an alert to a user named admin1@contoso.com if the average CPU usage of a virtual machine named VM1 is greater than 70 percent for a period of 15 minutes.To complete this task, sign in to the Azure portal.
Answer(s): A
Create an alert rule on a metric with the Azure portal1. In the portal, locate the resource, here VM1, you are interested in monitoring and select it.2. Select Alerts (Classic) under the MONITORING section. The text and icon may vary slightly for different resources.3. Select the Add metric alert (classic) button and fill in the fields as per below, and click OK.Metric: CPU Percentage Condition: Greater than Period: Over last 15 minutes Notify via: email Additional administrator email(s): admin1@contoso.com
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-insights-alerts-portal
SIMULATION You need to collect all the audit failure data from the security log of a virtual machine named VM1 to an Azure Storage account.To complete this task, sign in to the Azure portal.This task might take several minutes to complete You can perform other tasks while the task completes.
Step 1: Create a workspace Azure Monitor can collect data directly from your Azure virtual machines into a Log Analytics workspace for detailed analysis and correlation.1. In the Azure portal, select All services. In the list of resources, type Log Analytics. As you begin typing, the list filters based on your input. Select Log Analytics workspaces.2. Select Create, and then select choices for the following items:3. After providing the required information on the Log Analytics workspace pane, select OK.While the information is verified and the workspace is created, you can track its progress under Notifications from the menu.Step 2: Enable the Log Analytics VM ExtensionInstalling the Log Analytics VM extension for Windows and Linux allows Azure Monitor to collect data from your Azure VMs.1. In the Azure portal, select All services found in the upper left-hand corner. In the list of resources, type Log Analytics. As you begin typing, the list filters based on your input. Select Log Analytics workspaces.2. In your list of Log Analytics workspaces, select DefaultWorkspace (the name you created in step 1).3. On the left-hand menu, under Workspace Data Sources, select Virtual machines.4. In the list of Virtual machines, select a virtual machine you want to install the agent on. Notice that the Log Analytics connection status for the VM indicates that it is Not connected.5. In the details for your virtual machine, select Connect. The agent is automatically installed and configured for your Log Analytics workspace. This process takes a few minutes, during which time the Status shows Connecting.After you install and connect the agent, the Log Analytics connection status will be updated with This workspace.
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-collect-azurevm
You have 10 virtual machines on a single subnet that has a single network security group (NSG).You need to log the network traffic to an Azure Storage account.What should you do?
A network security group (NSG) enables you to filter inbound traffic to, and outbound traffic from, a virtual machine (VM). You can log network traffic that flows through an NSG with Network Watcher's NSG flow log capability. Steps include:- Create a VM with a network security group- Enable Network Watcher and register the Microsoft.Insights provider- Enable a traffic flow log for an NSG, using Network Watcher's NSG flow log capability- Download logged dataView logged data
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.