Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Centralized Telemetry and Alerting with Azure Monitor
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An enterprise is migrating its core applications to Azure and wants to leverage cloud manageability features to maintain high system availability and operational efficiency. The operations team requires a centralized solution that can collect telemetry data, analyze resource and activity logs, track real-time application performance, and trigger automated alerts when issues occur.
Which Azure service should the enterprise implement?
Explanations
Azure Virtual Network
Azure Virtual Network
What Azure Virtual Network is
Azure Virtual Network (VNet) is the fundamental networking building block for private networks in Azure. It enables cloud resources like virtual machines, database instances, and web apps to securely communicate with one another, the internet, and on-premises networks.
Why it doesn't meet the requirement
Azure Virtual Network provides networking infrastructure, traffic routing, and boundary isolation. It is not a monitoring platform and does not offer native tools for application performance analysis, log aggregation, or system-wide operational alerts.
Key characteristics and limitations
- Private IP Addressing and Subnetting: Segregates network resources into customizable IP ranges and subnets.
- Traffic Filtering: Uses Network Security Groups (NSGs) to control inbound and outbound traffic flows.
- Connectivity Options: Facilitates secure inter-resource communication via VNet Peering, VPN Gateways, and ExpressRoute.
- No Built-in Log Querying: Does not include analytic engines or visualization dashboards for application health telemetry.
This answer would be correct if
The team required an isolated network infrastructure to connect virtual machines and restrict inbound traffic using security rules.
Additional context
To inspect network traffic flowing across a virtual network (such as NSG flow logs), administrators configure diagnostic settings to send network telemetry to Azure Monitor and Log Analytics.
Azure Monitor
Azure Monitor
What Azure Monitor is
Azure Monitor is a comprehensive, full-stack monitoring and observability service in Microsoft Azure. It provides a unified platform to collect, analyze, and act on telemetry and diagnostic data generated by cloud and on-premises resources.
How it meets the requirements
- Telemetry and Log Collection: Azure Monitor ingests diagnostic metrics and logs from Azure subscriptions, resource activity, operating systems, and hosted applications.
- Diagnostics and Deep Analysis: Through integrated features like Azure Log Analytics, administrators can execute sophisticated queries to troubleshoot complex issues and evaluate system health.
- Application Performance Tracking: With Application Insights, Azure Monitor tracks live web applications, measuring response times, failure rates, and dependencies.
- Automated Alerting: It provides alerting mechanisms and automated actions to notify teams or execute runbooks when performance thresholds or error conditions are met.
Key advantages and capabilities
- End-to-end Observability: Tracks every layer from underlying infrastructure and platform components up to user-facing applications.
- Unified Dashboarding: Visualizes metrics and log queries via native dashboards and Azure Workbooks.
- Proactive Management: Uses automated alert rules and anomaly detection to identify and mitigate incidents before end users are impacted.
- Operational Efficiency: Centralizes diagnostics into a single pane of glass, reducing maintenance overhead and management complexity.
Why this is optimal
Azure Monitor is specifically engineered as Azure's central manageability and diagnostics hub. Rather than requiring disjointed third-party tools, it integrates natively across all Azure services to deliver scalable logging, diagnostics, and automated response capabilities.
Azure Service Bus
Azure Service Bus
What Azure Service Bus is
Azure Service Bus is a fully managed enterprise integration message broker that enables asynchronous communication and decoupling between distinct software components, microservices, and applications.
Why it doesn't meet the requirement
Azure Service Bus is a messaging and integration platform, not a diagnostics or monitoring tool. It facilitates reliable message queuing and publish-subscribe patterns but does not provide centralized monitoring, logging analysis, or infrastructure alerting functionality.
Key characteristics and limitations
- Message Queues and Topics: Delivers point-to-point queuing and multi-subscriber publish/subscribe communication channels.
- Enterprise Messaging Features: Offers message ordering (FIFO), dead-lettering, duplicate detection, and transactional processing.
- Decoupled Architecture: Allows distributed systems to communicate reliably without requiring services to be online simultaneously.
- No Observability Tooling: Does not track cloud performance metrics or provide log query engines for diagnostics.
This answer would be correct if
The organization needed a managed message broker to decouple backend processing workloads from front-end user requests.
Additional context
Azure Service Bus instances emit diagnostic metrics and logs to Azure Monitor, which is the service responsible for monitoring Service Bus queue depths and resource health.
Azure Key Vault
Azure Key Vault
What Azure Key Vault is
Azure Key Vault is a secure cloud service designed to safeguard sensitive information such as cryptographic keys, application secrets, connection strings, and certificates.
Why it doesn't meet the requirement
Azure Key Vault focuses purely on security, secret management, and cryptographic protection, rather than system health, telemetry analysis, or performance diagnostics. It does not collect infrastructure metrics, analyze application health logs, or generate automated operational alerts for system performance.
Key characteristics and limitations
- Hardware Security Modules (HSMs): Provides FIPS-compliant hardware-backed protection for encryption keys.
- Certificate Lifecycle Automation: Streamlines the provisioning and auto-renewal of TLS/SSL certificates.
- Access Isolation: Utilizes role-based access control and access policies to enforce least privilege access to secrets.
- No Telemetry Analytics: Lacks capabilities to ingest, parse, or query operational logs and application metrics.
This answer would be correct if
The scenario asked for a secure storage solution to manage API credentials, database connection strings, and TLS certificates centrally.
Additional context
While Azure Key Vault generates diagnostic logs about access requests, these logs are routed into Azure Monitor for storage and querying rather than analyzed within Key Vault itself.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Resource Manager Templates
Describe the benefits of manageability in the cloud
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Policy
Describe the benefits of manageability in the cloud
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Autoscale
Describe the benefits of manageability in the cloud
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Portal
Describe the benefits of manageability in the cloud
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Dashboards
Describe the Azure portal
IntermediateAZ-400 Designing and Implementing Microsoft DevOps Solutions Exam
GitHub Branch Protection Rules and SAML SSO
Design and implement permissions and roles in GitHub
Last updated Validated