Practice Test 2 | Designing And Implementing Microsoft DevOps Solutions | AZ-400 | Dumps | Mock Test
You create a KQL statement to query traffic for outbound connections from monitored computers. You run the following KQL statement without errors.
How many records will be in the output table?
A. The result produces an error
B. The result produces 100 records
C. The result produces 120 records
D. The result produces 20 records
Correct Answer: D
Microsoft Azure Monitor stores two types of data: logs and metrics. This data helps users monitor, tune, and troubleshoot their applications and services. Azure Monitor collects data from applications, operating systems, Azure resources, subscriptions, tenants, and custom sources.
Logs data are the records that contain predominantly text information but can include numeric data as well. Typically, logs store event information from a variety of sources. Azure Monitor creates a table for each log source to store its data and uses Log Analytics workspace as a data storage.
When you run the query mentioned above (Number 2) in the Log Analytics workspace (Number 1), the output table would include only 20 records (Number 3). This results from the set statement (Number 2, line 1) that limits the output to 20 records even if take operator “asks” for 100 records (Number 1, line 6).
- Options A, B, and C are incorrect.
For more information about Kusto Query Language operators and statements, please visit the below URLs:
- https://docs.microsoft.com/en-us/azure/data-explorer/kusto/concepts/querylimits#limit-on-result-set-size-result-truncation
- https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/takeoperator
- https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/setstatement
- https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/tutorial?pivots=azuredataexplorer
Comments are closed, but trackbacks and pingbacks are open.