Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-500 Exam - Topic 10 Question 3 Discussion

You have an Azure subscription that contains an Azure SQL database named sql1.You plan to audit sql1.You need to configure the audit log destination. The solution must meet the following requirements:Support querying events by using the Kusto query language.Minimize administrative effort.What should you configure?
C) a Log Analytics workspace
A) an event hub
B) a storage account

Microsoft AZ-500 Exam - Topic 10 Question 3 Discussion

Actual exam question for Microsoft's AZ-500 exam
Question #: 3
Topic #: 10
[All AZ-500 Questions]

You have an Azure subscription that contains an Azure SQL database named sql1.

You plan to audit sql1.

You need to configure the audit log destination. The solution must meet the following requirements:

Support querying events by using the Kusto query language.

Minimize administrative effort.

What should you configure?

Show Suggested Answer Hide Answer
Suggested Answer: C

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-log-analytics-wizard

by Geoffrey at May 07, 2022, 06:53 PM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Twana
9 months ago
C is definitely the best choice here, no doubt!
upvoted 0 times
...
Laurene
9 months ago
Wait, can you really query logs with Kusto in a storage account?
upvoted 0 times
...
Remedios
9 months ago
I thought an event hub would work too, but I guess not.
upvoted 0 times
...
Lashon
9 months ago
Totally agree, C is the way to go!
upvoted 0 times
...
Helene
9 months ago
You should configure a Log Analytics workspace for Kusto queries.
upvoted 0 times
...
Glendora
9 months ago
I definitely remember that a storage account wouldn't work for querying with Kusto, but I’m not 100% confident about the other two options.
upvoted 0 times
...
Shaunna
10 months ago
I'm a bit confused. I thought an event hub could also be a valid option, but I don't recall if it supports Kusto queries like the workspace does.
upvoted 0 times
...
Dorethea
10 months ago
I remember practicing a similar question, and I believe the Log Analytics workspace is the right choice here. It seems to fit all the requirements.
upvoted 0 times
...
Glen
10 months ago
I think we might need to configure a Log Analytics workspace since it supports Kusto queries, but I'm not entirely sure if it minimizes admin effort as well.
upvoted 0 times
...
Aliza
10 months ago
Okay, I think I've got a plan. I'll try changing the Default Case Creator to the user's manager and see if that resolves the error in production.
upvoted 0 times
...
Ivette
10 months ago
Hmm, this looks like a tricky one. I'll need to carefully analyze the schedule intra-day view to identify any coverage issues or dips.
upvoted 0 times
...
Lisha
10 months ago
Hmm, I'm a bit confused. Azure Backup could also be used to back up the database and restore it to Azure, but I'm not sure if that would allow for testing failover. I'll need to think this through a bit more.
upvoted 0 times
...
Kiley
10 months ago
Hmm, I'm not sure about this one. I'll have to think it through carefully. Maybe ARP cache poisoning or TFTP brute force could work too.
upvoted 0 times
...

Save Cancel