Free Microsoft Azure AZ-104 Actual Exam Questions - Question 9 Discussion
to create an alert in Azure when more than two error events are logged to the System event
log on VM1 within an hour. Solution: You create an Azure storage account and configure
shared access signatures (SASs). You install the Microsoft Monitoring Agent on VM1. You
create an alert in Azure Monitor and specify the storage account as the source. Does that
meet the goal?
B. Using a storage account as the source for alerts on event logs doesn’t really work here. The Microsoft Monitoring Agent sends data to a Log Analytics workspace, not directly to a storage account. Without setting up Log Analytics, you can’t create the alert based on those system events. So this setup misses that key part.
Option B, storage accounts don’t trigger alerts from event logs directly.
B imo, storage accounts don’t handle event log data for alerts like this.
B. The storage account isn’t really where you’d pull event log data from for alerts. You’d want to use a Log Analytics workspace instead since it can collect and analyze the VM’s event logs directly. The Microsoft Monitoring Agent helps send data to Log Analytics, not storage accounts, so this setup won’t trigger the alert as needed.
B