Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 4 question 70 discussion

Actual exam question from Microsoft's AZ-104

Question #: 70
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure virtual machine named VM1 that runs Windows Server 2016.
You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour.
Solution: You create an Azure Log Analytics workspace and configure the data settings. You add the Microsoft Monitoring Agent VM extension to VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by fedztedz at Dec. 1, 2020, 3:38 p.m.

Comments

Submit Cancel

mlantonis

Highly Voted 4 years, 1 month ago

Correct Answer: You add the Microsoft Monitoring Agent VM extension to VM1 > This is WRONG You Install the Microsoft Monitoring Agent VM agent to VM1 > This is Correct 1. Log analytics agent - Install in VM. 2. Log analytics workspace - collect the log files from Log Analytics Agent. 3. Azure Monitor - Create alert based on logs read from Log Analytics Workspace. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

upvoted 156 times

go4adil

1 year, 4 months ago

Correct Answer is: B Microsoft Monitoring Agent (MMA) mentioned in the question is different from Azure Monitoring Agent (AMA), the latest agent. Azure Monitor Agent replaces the Azure Monitor legacy monitoring agents. MMA is referred to Log Analytics Agent during its installation setup and agent connectivity verification to Azure Monitor. Refer to below link https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows?tabs=setup-wizard So, I second mlantonis: You add the Microsoft Monitoring Agent VM extension to VM1 > This is WRONG You Install the Microsoft Monitoring Agent VM agent to VM1 > This is Correct 1. Log analytics agent - Install in VM. 2. Log analytics workspace - collect the log files from Log Analytics Agent. 3. Azure Monitor - Create alert based on logs read from Log Analytics Workspace

upvoted 2 times

...

magichappens

3 years, 2 months ago

That linked article from @mlantonis actually mentions that [...the Azure Monitor agent is meant to replace the Log Analytics agent, Azure Diagnostic extension and Telegraf agent for both Windows and Linux machines...] and [...The Azure Monitor agent is only available as a virtual machine extension...] so guess nowadays it would be rather "yes"?

upvoted 11 times

klasbeatz

2 years, 8 months ago

Agreed Virtual machines, scale sets Virtual machine extension Installs the agent by using Azure extension framework. https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agents-overview

upvoted 2 times

...

photon99

1 year, 8 months ago

Log Analytics workspace should be the Destination and not to be specified as the source. Here the source is the VM with monitoring agent.

upvoted 1 times

...

Goofer

2 years, 2 months ago

In 2023 you can add Microsoft Monitoring Agent VM extension to VM1 See: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-manage?tabs=azure-portal

upvoted 11 times

...

Load full discussion...

...

Lapiduse

Highly Voted 4 years, 5 months ago

I think the Answer should be - Yes. You need to click the Add button on Portal-> Settings-> Extensions to Install the Extension on VM. Azure Monitor currently has multiple agents because of recent consolidation of Azure Monitor and Log Analytics. The Azure Monitor Agent is implemented as an Azure VM extension. Windows/Linux name: Microsoft.Azure.Monitor Windows type: AzureMonitorWindowsAgent Linix type: AzureMonitorLinuxAgent https://docs.microsoft.com/en-us/azure/azure-monitor/platform/azure-monitor-agent-install?tabs=ARMAgentPowerShell%2CPowerShellWindows%2CPowerShellWindowsArc%2CCLIWindows%2CCLIWindowsArc

upvoted 39 times

YooOY

3 years, 8 months ago

The Azure Monitor agent is only available as a virtual machine extension. The Log Analytics extension for Windows and Linux install the Log Analytics agent on Azure virtual machines. The Azure Monitor Dependency extension for Windows and Linux install the Dependency agent on Azure virtual machines. These are the same agents described above but allow you to manage them through virtual machine extensions. You should use extensions to install and manage the agents whenever possible. https://docs.microsoft.com/en-us/azure/azure-monitor/agents/agents-overview#virtual-machine-extensions

upvoted 2 times

YooOY

3 years, 8 months ago

so add extension does not mean the agent is installed, agent can still be missing.

upvoted 2 times

spaceman12

2 years, 4 months ago

Not quite, it seems that installing the extension will also automatically install the agernt. See table where it says Agent Installed: Azure Monitor Agent Reference docs here: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-windows-client

upvoted 1 times

...

QiangQiang

4 years, 4 months ago

agreed, should be yes

upvoted 3 times

...

klexams

2 years, 8 months ago

The question is about MMA (microsoft monitoring agent) which is the legacy agent which needs to be installed on the VM.

upvoted 1 times

...

Rio55

Most Recent 3 months, 2 weeks ago

Selected Answer: A

It would be yes nowadays.

upvoted 1 times

...

58b2872

4 months, 4 weeks ago

Selected Answer: B

such a trap !! You add the Microsoft Monitoring Agent VM extension to VM1 > This is WRONG You Install the Microsoft Monitoring Agent VM agent to VM1 > This is Correct 1. Log analytics agent - Install in VM. 2. Log analytics workspace - collect the log files from Log Analytics Agent. 3. Azure Monitor - Create alert based on logs read from Log Analytics Workspace.

upvoted 3 times

...

Sholasleek

7 months, 2 weeks ago

The answer is yes https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-create-log-alert-rule

upvoted 2 times

...

Dankho

8 months, 1 week ago

Both the manual installation and the VM extension installation of MMA would work, but the VM extension is general more convenient for updates and maintenance. As long as you have these pieces together, I think it's always yes, since there are many versions of this question: - Azure Log Analytics workspace is created. - Agent configuration settings are configured (or data settings are configured same). - Microsoft Monitoring Agent (MMA) is installed on VM1 (or extension is added to VM1 same). - Alert is created in Azure Monitor using Log Analytics workspace as the source. The answer is no when you don't see these main parts but I wouldn't get hung up on how they are installed or how they are configured, the questions that completely use other things like a storage account or Vault, or something else besides these, then go with no, and I know there are a few versions that mention other items besides these.

upvoted 1 times

...

0378d43

8 months, 2 weeks ago

According to the below link extensions are Yes for Azure VM. https://learn.microsoft.com/en-us/answers/questions/1643763/is-adding-the-microsoft-monitoring-agent-vm-extens

upvoted 1 times

...

[Removed]

9 months ago

Selected Answer: B

B is corerct You create an Azure Log Analytics workspace and configure the data settings. You INSTALL the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.

upvoted 1 times

...

OscarFRItz

10 months, 2 weeks ago

Virtual machines, scale sets No Virtual machine extension Installs the agent using Azure extension framework On-premises servers No Virtual machine extension (with Azure Arc agent) Installs the agent using Azure extension framework, provided for on-premises by installing Arc agent A it is

upvoted 1 times

...

WeepingMaplte

1 year, 1 month ago

Selected Answer: A

It is possible now. Question is 4 years ago. https://learn.microsoft.com/en-us/services-hub/unified/health/mma-setup

upvoted 3 times

...

MandAsh

1 year, 2 months ago

Selected Answer: A

It should be yes.. Monitoring agent is legacy and newer version is VM extension. And both does same job.

upvoted 1 times

...

tashakori

1 year, 3 months ago

Yes is correct

upvoted 1 times

...

Chris76

1 year, 3 months ago

This is beyond fked up. Install vs Add. Questions should be based on knowledge, concepts, and intents, not on contextual interpretation of polysemantic words.

upvoted 6 times

...

tashakori

1 year, 3 months ago

No is right

upvoted 1 times

...

photon99

1 year, 8 months ago

Again, Microsft should remove such LEGACY questions because MMA is being deprecated and replcaed by AMA (Azure Monitor Agent).

upvoted 2 times

Batiste2023

1 year, 7 months ago

Well, the point is, Microsoft probably DID remove such legacy questions. Examtopics did not... (Which, to be fair, is difficult to decide upon - how do you know for sure that a particular question will definitely not be used anymore in the exam??)

upvoted 2 times

...

Aniruddha_dravyakar

1 year, 8 months ago

You create an Azure Log Analytics workspace and configure the Agent configuration settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.

upvoted 1 times

...

oopspruu

1 year, 10 months ago

Either the question is old or worded poorly. Assuming Azure Monitor Agent and Microsoft Monitoring Agent are 2 different things, the Answer B is valid as you can add Azure Monitor Agent as an extension but not MMA. However, its 2023 and AMA should replace MMA now so you can add AMA as an extension. Not sure who to blame here. ET for an old question with old terminology or MS for wording the question so poorly.

upvoted 2 times

...

Load full discussion...