Practice Test 2 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company has an Azure subscription. They have around 50 virtual machines defined as part of the subscription. Azure Diagnostics have been enabled on all of the virtual machines.
You have to get the following details with regard to the virtual machines.
- Identify the user who stopped the virtual machine the previous week.
- Query the security events for the virtual machines.
Which of the following would you use in Azure Monitor for the following requirement?
“Query the security events for the virtual machines”.
A. Activity Log
B. Logs
C. Metrics
D. Service Health
Answer -B
For Any Security-related events, you should check Logs->SecurityEvent.
Since this is clear from the implementation, all other options are incorrect.
For more information on collecting data from the virtual machine, one can visit the below URL-
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-collect-azurevm
Comments are closed, but trackbacks and pingbacks are open.