Exam AZ-103 topic 3 question 10 discussion

Thier answer is wrong. The answer is "C". Go to Azure Monitor > Alerts > New Alert > Select Resource > .... Here you can select a resource type, since the question refers to VM1, you need to select the virtual machine type. Selecting a type is not required but their answer is looking for virtual machine type.

I think the correct answer is B - Azure Log Analytics workspace. You can collect Windows Event logs into Log Analytics workspace https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events Then you can create alert rule, with resource type "Azure Log Analytics workspace" and specify the condition based on query from collected logs. https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-log

B is the right answer

Azure Log Analytics Workspace is the answer in 2023.

Wow there's a lot of different answers. From Udemy: Explanation Correct Answer(s): Azure Log Analytics workspace – Logs contain different kinds of data organized into records with different sets of properties for each type. You can create and test queries using Log Analytics in the Azure portal and then either directly analyze the data using these tools or save queries for use with visualizations or alert rules. You need to select your Log Analytics workspace as the resource, since this is a log based alert signal. https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/configure-azure-monitor Wrong Answers: Virtual machine extension – This is to configure post-deployment configurations on a virtual machine. Virtual machine –Logs will be sent to Log destination like Log analytics workspace, nothing gets persisted inside a virtual machine. Metric alert – Metric is for alerts based on numbers like CPU usage, Memory usage etc.

For the first step to create the new alert tule, under the Create Alert section, you are going to select your Log Analytics workspace as the resource, since this is a log based alert signal. The log data goes to the analytics workspace and it is from there that the alert is triggered.

Answer: B: Azure Log Analytics workspace is used for on-premises computers monitored by System Center Operations Manager. Highlighted answer is wrong but description is pretty clear :)

Just tested. Correct answer is B. Azure Log Analytics workspace. Reason although you can set alert on VM and VM extensions, only on Log Analytics can you get System event logs, to set alert on.

From this doc, it seems the log analytics workspace is also considered a resource: https://docs.microsoft.com/en-us/azure/azure-monitor/vm/quick-collect-azurevm And the VM extension is also needed.

The Clue is "resource type to monitor." VM is the answer.

Here is the correct answer. refer pic at Point 4 ...from below source link Source: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-log#creating-log-alert-for-log-analytics-and-application-insights-from-the-alerts-management. our test condition to monitor error is in LA workspace,,, azure monitor monitors this LA workspace ...

Good Answer is B. Azure Log Analytics workspace. You can't monitor events with virtual machines. A & D aren't resources.

signal type: Log alerts, resource type: Log Analytics workspace

C. virtual machine

C. virtual machine

correct answer is C. I have tried it and the only option in the list one can choose as a resource is virtual machine.

To test this out, I have created a VM and enabled logging on it. When you enable logging, Azure will create a default Log Analytics Workspace. Next, I went in monitor to create an alert for System Errors. In Monitor, we can either choose VM or Log Analytics as the source of the alert. If you select, VM as the source of the alert, there is no error log option but Activity Logs. If you select Log Analytics space, System Error option will be available to create an alert. May be the detail could be "/...Azure collects events from VM1". You collect the events somewhere, which is a Log Analytics Workspace. This is, in turn, the source of the alert. Quite confusing guys... I would go with B.