Microsoft DevOps Engineer Expert AZ-400 Practice Question
You are troubleshooting a production Azure App Service that is instrumented with the Application Insights SDK. Telemetry from the app is stored in a Log Analytics workspace. You suspect that high values of the 'Process \ Private Bytes' performance counter correlate with increases in request latency. Create a single Kusto Query Language (KQL) statement that, for the last two hours, returns one row per 5-minute window containing the average request duration in milliseconds and the maximum value of the 'Process \ Private Bytes' counter. Which KQL statement should you run so you can plot both metrics on the same time-series chart?
requests | where timestamp > ago(2h) | summarize avgDurationMs = avg(duration/1ms) by bin(timestamp, 5m) | join kind = inner ( performanceCounters | where timestamp > ago(2h) and name == "Private Bytes" | summarize maxPrivateBytes = max(value) by bin(timestamp, 5m) ) on timestamp | project timestamp, avgDurationMs, maxPrivateBytes
performanceCounters | where name == "Private Bytes" and timestamp > ago(2h) | summarize maxPrivateBytes = max(value) by bin(timestamp, 5m) | project timestamp, maxPrivateBytes
requests | where timestamp > ago(2h) | join kind = inner performanceCounters on timestamp | where name == "Private Bytes" | summarize avgDurationMs = avg(duration/1ms), maxPrivateBytes = max(value) by bin(timestamp, 5m)
make-series avgDurationMs = avg(duration/1ms), maxPrivateBytes = maxif(value, name == "Private Bytes") on timestamp from ago(2h) to now() step 5m in (requests, performanceCounters)
Aggregate each metric over identical time buckets with bin().
Join the two summarized result sets on the common timestamp column. The correct query performs these three steps, converting the request duration to milliseconds, summarizing by 5-minute bins, and joining the summaries on the timestamp column. The other queries fail because they either:
summarise one table but forget to join it with the other, so the two series cannot be correlated,
use make-series without projecting both metrics in the same series,
or perform the join before the aggregation, which multiplies rows and yields incorrect results.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the purpose of the 'bin()' function in KQL?
Open an interactive chat with Bash
Why is the 'join' operator used in the correct query?
Open an interactive chat with Bash
What role does the 'summarize' operator play in the query?
Open an interactive chat with Bash
What is KQL's bin() function used for?
Open an interactive chat with Bash
What does 'summarize' do in KQL?
Open an interactive chat with Bash
Why is 'join' important in the correct KQL query?
Open an interactive chat with Bash
Microsoft DevOps Engineer Expert AZ-400
Implement an instrumentation strategy
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .