exam questions

Exam MD-101 All Questions

View all questions & answers for the MD-101 exam

Exam MD-101 topic 4 question 53 discussion

Actual exam question from Microsoft's MD-101
Question #: 53
Topic #: 4
[All MD-101 Questions]

You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company.
You have a computer named Computer1 than runs Windows 10. You need to view the events collected from Computer1.
Which query should you run in Log Analytics?

  • A. Event | where Computer = = "Computer1"
  • B. ETWEvent | where SourceSystem = = "Computer1"
  • C. ETWEvent | where Computer = = "Computer1"
  • D. Event | where SourceSystem = = "Computer1"
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Windows event records properties include:
Computer: Name of the computer that the event was collected from.
The following table provides different examples of log queries that retrieve Windows Event records.

Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-windows-events

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
golijat
1 year, 9 months ago
Correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...