Microsoft AZ-500 Exam - Topic 2 Question 74 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 74
Topic #: 2

Lab Task

Task 2

You need to ensure that the events in the NetworkSecurityGroupRuleCounter log of the VNETOI-Subnet0-NSG network security group (NSG) are stored in the Iogs31330471 Azure Storage account for 30 days.

Asee the task answer with step by step below

Show Suggested Answer

Suggested Answer: A

Enable diagnostic resource logging for the NSG. You can use the Azure portal, Azure PowerShell, or the Azure CLI to do this. You need to select theRule countercategory under Logs and choose theIogs31330471storage account as the destination.

Configure the retention policy for the storage account to keep the logs for 30 days. You can use the Azure portal, Azure PowerShell, or the Azure CLI to do this. You need to specify thedaysparameter as 30 for the Set-AzStorageServiceProperty cmdlet or the az storage logging update command.

View and analyze the logs in the storage account. You can use any tool that can read JSON files, such as Azure Storage Explorer or Visual Studio Code.You can also export the logs to any visualization tool, SIEM solution, or IDS of your choice

by Tony at Sep 18, 2024, 02:32 AM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Katlyn

4 months ago

I thought logs were kept indefinitely in Azure Storage?

upvoted 0 times

...

Jaclyn

4 months ago

Just make sure to configure the retention policy correctly.

upvoted 0 times

...

Joanne

4 months ago

Wait, 30 days? Is that really necessary?

upvoted 0 times

...

Laquita

4 months ago

Totally agree, that's the way to go!

upvoted 0 times

...

Ezekiel

5 months ago

You need to set up diagnostic settings for the NSG.

upvoted 0 times

...

Deandrea

5 months ago

I believe we might need to configure diagnostic settings on the NSG, but I can't recall all the steps involved.

upvoted 0 times

...

Paul

5 months ago

I'm a bit confused about the specific commands to use for transferring the logs to the storage account.

upvoted 0 times

...

Vanna

5 months ago

I remember practicing a similar question about log retention, and I think we have to use Azure Monitor for this task.

upvoted 0 times

...

Crissy

5 months ago

I think we need to set up a retention policy for the logs, but I'm not entirely sure how to do that in Azure.

upvoted 0 times

...

Benedict

5 months ago

Alright, I think I've got this. I'll need to find the VNETOI-Subnet0-NSG network security group, go to the diagnostic settings, and then set the log retention policy for the NetworkSecurityGroupRuleCounter log to 30 days, with the logs being sent to the Iogs31330471 storage account.

upvoted 0 times

...

Gerald

5 months ago

No problem, I've done something like this before. I'll just need to locate the VNETOI-Subnet0-NSG NSG, navigate to the diagnostic settings, and configure the log retention policy for the NetworkSecurityGroupRuleCounter log to 30 days, sending the logs to the Iogs31330471 storage account.

upvoted 0 times

...

Lorrie

5 months ago

Wait, I'm a little confused. Do I need to create a new storage account or can I use the existing Iogs31330471 account? I'll have to double-check the details in the question.

upvoted 0 times

...

Frederica

5 months ago

Okay, I think I know what I need to do here. I'll need to find the VNETOI-Subnet0-NSG network security group and then update the log retention policy for the NetworkSecurityGroupRuleCounter log to store the events for 30 days.

upvoted 0 times

...

Lang

5 months ago

Hmm, this seems pretty straightforward. I'll need to look into how to configure the log retention settings for the NetworkSecurityGroupRuleCounter log.

upvoted 0 times

...

Twana

6 months ago

I'm pretty sure the answer is A. WS-Addressing has a namespace defined by an industry standards organization, while the others don't.

upvoted 0 times

...

Karl

1 year ago

Hold up, we need to ensure the events are stored for 30 days? That's a lot of data! I hope the Azure team has a big enough storage closet for all that.

upvoted 0 times

...

Rima

1 year ago

Hmm, network security group logs, huh? Sounds like a job for a security wizard. Let's hope the answer is as clear as a crystal ball.

upvoted 0 times

Rodney

1 year ago

User 3: Step 3: Configure the NSG to send logs to the Iogs31330471 Azure Storage account

upvoted 0 times

...

Rodrigo

1 year ago

User 2: Step 2: Navigate to the VNETOI-Subnet0-NSG NSG

upvoted 0 times

...

Kassandra

1 year ago

Step 1: Go to the Azure portal

upvoted 0 times

...

Eden

1 year ago

Okay, let's see... Store the events for 30 days, in the Iogs31330471 Azure Storage account. Seems straightforward enough, right? I think I've got this one covered.

upvoted 0 times