Microsoft Azure Solutions Architect Expert AZ-305 Practice Question
Contoso operates several Azure subscriptions for different business units. You must design a logging and monitoring strategy with the following requirements:
Consolidate platform and resource diagnostic logs from all subscriptions so that administrators can run cross-resource Kusto queries.
Retain all log data for seven years to meet regulatory compliance.
Keep costs low; interactive querying is required only for the most recent 90 days. Historical data can tolerate up to 12 hours retrieval latency. Which solution should you recommend?
Configure diagnostic settings on every resource to stream logs to an Event Hub and ingest them into an Azure Data Explorer cluster set to seven-year retention.
Create a Log Analytics workspace in each subscription and set the workspace retention to 2,555 days (seven years).
Deploy a single Log Analytics workspace in a dedicated monitoring subscription; send all diagnostic and activity logs to it; keep 90 days of data in the default retention and move older data to the workspace archive tier.
Export activity and diagnostic logs from each subscription directly to an Azure Storage account with a seven-year lifecycle policy and rely on Storage analytics for ad-hoc queries.
A single, centrally located Log Analytics workspace allows administrators to run Kusto queries across all data regardless of the originating subscription. Setting the workspace's default retention to 90 days keeps frequently queried data in the hot tier. Enabling the Log Analytics archive tier for data older than 90 days preserves the full seven-year history at a fraction of the cost of hot retention and supports on-demand restoration within hours, which satisfies the relaxed access-time requirement. Deploying separate workspaces per subscription with seven-year hot retention would be far more expensive and would complicate cross-subscription queries. Streaming directly to Event Hubs or only exporting to Azure Storage removes the ability to perform ad-hoc Kusto queries without additional services. Therefore, the central workspace plus archive tier best meets all consolidation, retention, querying, and cost goals.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a Log Analytics workspace in Azure?
Open an interactive chat with Bash
What is the difference between the hot retention tier and the archive tier in Log Analytics?
Open an interactive chat with Bash
Why is Kusto querying important for Azure monitoring and diagnostics?
Open an interactive chat with Bash
Microsoft Azure Solutions Architect Expert AZ-305
Design identity, governance, and monitoring solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .