Exam AZ-500 topic 5 question 36 discussion

Actual exam question from Microsoft's AZ-500

Question #: 36
Topic #: 5

You have an Azure subscription that contains an Azure SQL database named sql1.
You plan to audit sql1.
You need to configure the audit log destination. The solution must meet the following requirements:
✑ Support querying events by using the Kusto query language.
✑ Minimize administrative effort.
What should you configure?

A. an event hub
B. a storage account
C. a Log Analytics workspace

Show Suggested Answer

Suggested Answer: C 🗳️

by bmanu at May 18, 2021, 2:12 a.m.

Comments

Submit Cancel

epic13131

Highly Voted 2 years, 10 months ago

Correct, key here is "Kusto query language"

upvoted 11 times

...

kumax

Highly Voted 2 years, 11 months ago

On exam, May 2021.

upvoted 7 times

...

BMF

Most Recent 7 months ago

C. On exam 4th Nov.

upvoted 1 times

...

ESAJRR

9 months ago

Selected Answer: C

C. a Log Analytics workspace

upvoted 1 times

...

zellck

1 year, 1 month ago

Selected Answer: C

C is the answer. https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-query-overview Azure Monitor Logs is based on Azure Data Explorer, and log queries are written by using the same Kusto Query Language (KQL). This rich language is designed to be easy to read and author, so you should be able to start writing queries with some basic guidance. Areas in Azure Monitor where you'll use queries include: - Log Analytics: Use this primary tool in the Azure portal to edit log queries and interactively analyze their results. Even if you intend to use a log query elsewhere in Azure Monitor, you'll typically write and test it in Log Analytics before you copy it to its final location.

upvoted 1 times

...