Prepare and test your skills

Prepare and test your skills

Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An IT administrator wants to receive automated email and SMS notifications whenever Microsoft Azure experiences service issues or schedules planned maintenance that impacts their subscription.
Which component must be configured and linked to the Service Health alert rule to deliver these notifications?
A Privileged Identity Management (PIM) security alert is a built-in governance feature within Microsoft Entra ID that detects suspicious, redundant, or risky privileged role assignments (such as having too many permanent Global Administrators or assigning roles outside of PIM).
PIM security alerts focus exclusively on identity security and role-based access control hygiene. They have no visibility into Azure cloud infrastructure incidents, regional outages, or planned hardware maintenance managed under Azure Service Health.
The administrator wanted to monitor and review alerts regarding excessive permanent administrative privileges assigned in Microsoft Entra ID.
A Log Analytics workspace is an environment within Azure Monitor used to aggregate, index, query, and analyze log data collected from various Azure resources, on-premises systems, and applications using the Kusto Query Language (KQL).
While a Log Analytics workspace can store logs and serve as a target for log search queries, it is not the mechanism responsible for sending notifications. Even when creating alerts based on workspace queries, an action group is still required to handle the actual delivery of SMS, email, or automated actions.
The administrator needed a centralized location to run complex analytical queries against diagnostic logs across multiple cloud resources.
A diagnostic setting is a configuration applied to Azure resources to route platform logs, resource logs, and metrics to external storage, analytics, or streaming destinations.
Diagnostic settings control the export and routing of telemetry data (such as sending logs to a Log Analytics workspace, Storage account, or Event Hub). They do not evaluate alert criteria, manage recipient contact lists, or send direct user notifications such as email or SMS messages.
A scenario required exporting audit and telemetry logs to a long-term Storage account or streaming them to an Event Hub for SIEM analysis.
An action group is a centralized collection of notification preferences and automated actions defined by an Azure subscription owner. When an alert rule—such as a Service Health alert or an activity log alert—triggers, Azure Monitor uses the associated action group to notify designated recipients or execute automated operational steps.
To receive email and SMS notifications about platform events, the administrator creates a Service Health alert rule and binds it to an action group. Within this action group, individual notification channels (such as Email/SMS/Push/Voice) are configured with the specific email addresses and phone numbers of the administrative staff. When a health incident or maintenance event matches the alert condition, the action group dispatches the messages immediately.
Action groups provide a modular, scalable architecture in Azure Monitor. Separating the trigger conditions (the alert rule) from the notification payload delivery (the action group) ensures standard notification lists are maintained without modifying individual monitoring rules.
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
Keep the momentum going with these hand-picked practice scenarios
Last updated Validated