Microsoft Azure Solutions Architect Expert AZ-305 Practice Question

Your organization operates workloads in five Azure subscriptions. Compliance policy requires that all Azure resource diagnostic and activity logs be kept for at least seven years. Operations engineers must be able to run ad-hoc Log Analytics queries against the most recent 90 days of data and create near-real-time alert rules based on those queries. The solution must minimize operational effort and overall cost while satisfying the retention and query requirements.

Which approach should you recommend?

  • Configure each resource to send diagnostics directly to a central storage account that has immutable blob storage and lifecycle rules to move data to the Archive access tier; deploy Azure Sentinel workspaces in every subscription to query and alert on the stored data.

  • Stream all diagnostic and activity logs from each subscription to an Azure Event Hubs namespace, process them with an Azure Function that inserts records into an Azure SQL Database configured with long-term backup retention, and build alert rules that query the database.

  • Enable Azure Monitor metrics exporter on every resource and send the output to an Azure Data Explorer cluster configured for seven-year retention; use scheduled Kusto queries in Data Explorer to generate alerts.

  • Create a dedicated Log Analytics workspace in a central operations subscription. Configure subscription-level diagnostic settings in each subscription to forward activity logs, and configure resource or resource group diagnostic settings to forward resource logs, all to this workspace. Set the workspace's interactive retention to 90 days, enable the Archive tier with seven-year retention for older data, and define Azure Monitor alert rules on the workspace.

Microsoft Azure Solutions Architect Expert AZ-305
Design identity, governance, and monitoring solutions
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot