Microsoft Azure Security Engineer Associate AZ-500 Practice Question
Your SOC must ingest Syslog from 40 on-premises Linux servers into Microsoft Sentinel. The data should also be copied to an existing Log Analytics workspace used by the IT ops team. You want the simplest deployment that avoids installing multiple agents per server. Which agent should you use?
Azure Diagnostics extension for Linux
Log Analytics agent (MMA/OMS)
Dependency agent
Azure Monitor agent managed through a Data Collection Rule
The Azure Monitor agent (AMA) can be configured with a data collection rule to collect Syslog events and route the same data to multiple destinations-up to five Log Analytics workspaces or Event Hubs-at the same time. This lets you send the events to both the Microsoft Sentinel workspace and the IT operations workspace with a single agent on each server. The legacy Log Analytics (MMA/OMS) agent supports only one workspace on Linux, the Dependency agent is used for process-dependency mapping rather than log collection, and the Azure Diagnostics extension cannot forward Syslog to Microsoft Sentinel.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Azure Monitor agent (AMA)?
Open an interactive chat with Bash
What are Data Collection Rules (DCRs) in Azure Monitor agent?
Open an interactive chat with Bash
How does the Azure Monitor agent compare to the Log Analytics agent (MMA/OMS)?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .