Exam AZ-500 topic 4 question 20 discussion

Actual exam question from Microsoft's AZ-500

Question #: 20
Topic #: 4

HOTSPOT -
You have an Azure subscription that contains a user named Admin1 and a resource group named RG1.
In Azure Monitor, you create the alert rules shown in the following table.

Admin1 performs the following actions on RG1:
✑ Adds a virtual network named VNET1
✑ Adds a Delete lock named Lock1
Which rules will trigger an alert as a result of the actions of Admin1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

by milad123 at March 11, 2021, 5:36 p.m.

Comments

Submit Cancel

sureshatt

Highly Voted 3 years, 10 months ago

Adding/Removing locks are also Administrative. Therefore given answer is correct.

upvoted 32 times

...

glowglow

Highly Voted 3 years, 10 months ago

Administrative category This category contains the record of all create, update, delete, and action operations performed through Resource Manager. Examples of the types of events you would see in this category include "create virtual machine" and "delete network security group" Every action taken by a user or application using Resource Manager is modeled as an operation on a particular resource type. If the operation type is Write, Delete, or Action, the records of both the start and success or fail of that operation are recorded in the Administrative category. The Administrative category also includes any changes to Azure role-based access control in a subscription.

upvoted 13 times

...

brooklyn510

Most Recent 1 year ago

On exam 1/2/24

upvoted 4 times

...

Snaileyes

1 year, 9 months ago

The Security category: Contains the record of any alerts generated by Microsoft Defender for Cloud. An example of a Security event is Suspicious double extension file executed. See: https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log-schema#categories

upvoted 3 times

...