Microsoft Azure Solutions Architect Expert AZ-305 Practice Question

Your company has five Azure subscriptions for production and non-production workloads. Compliance standards require that all diagnostic and activity logs be retained for at least two years and that production engineers must not be able to view non-production logs, and vice-versa. You need a scalable, cost-effective logging architecture that minimizes operational overhead while allowing RBAC-based segregation of log data. Which approach should you recommend?

  • Provision a separate Log Analytics workspace in each subscription and grant engineers Reader permissions only on their own subscription's workspace.

  • Create one Log Analytics workspace in a dedicated management subscription, enable diagnostic settings on all resources to stream logs to it, and use workspace-based RBAC to control access for production and non-production teams.

  • Enable Azure Monitor metrics for all resources and rely on Azure Advisor to capture compliance-related log data for two-year retention.

  • Stream activity logs and diagnostic logs from every resource to a single Azure Storage account with a two-year lifecycle policy, and use Application Insights to query log data.

Microsoft Azure Solutions Architect Expert AZ-305
Design identity, governance, and monitoring solutions
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot