Exam AZ-301 topic 2 question 46 discussion

My take on this question is that it asks about how to apply "automatic alerts" when a new subscription is created. In this sense Azure Policy that could be created with that new subscription and it can be used to to assign "automatic alerts" through custom definitions. So I think correct answer is still Azure Policy

I think it's Automation Runbook. There is nothing in protal that would notify when a new subscription was added. All solutions like Policy, Log Analytics, Actions Groups are scope to a resource group/resource but not a subscription

there is updated form of the question "Your company has several Azure subscriptions that are part of a Microsoft Enterprise Agreement. The company's compliance team creates automatic alerts by using Azure Monitor. You need to recommend a solution to automatically recreate the alerts in the new Azure subscriptions that are added to the Enterprise Agreement" with "solution to automatically recreate the alerts in the new Azure subscriptions that are added to the Enterprise Agreement" with recreate alerts in the subs. added, i think only ARM can do this.

given answer is correct It is asking how to apply the alert to the new subscription. SO action groups will not do anything, neither will log analytics alerts. Which leave A and D. . SO down to A,E&D. D are not used to create new subscriptions that I can find, thus leaving the only answer left as A Runbooks and E poilcy.A Runbook that gets all subscriptions and creates the alert there which is not automatic so we have last opiton policy and Policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources so it will work for any new subscription added if assigned at management group level.

E. Azure Policy

Azure Policy helps to enforce organizational standards and to assess compliance at-scale. If they add a new sub that meets a policy the policy won't alert. C is the best answer as it will alert when a new sub is created

E is correct answer.

Another trick question.. E for Policy won't apply automatically to new subscription unless assigned to a Management group. D ARM template would only have effect if used That sort of leaves us with A Runbook that gets all subscriptions and creates the alert there.

The answer should be C. Create the following alert in Azure Monitor and Action group. Alert condition: Whenever the Activity Log has an event with Category='Administrative', Signal name='Create Subscription Definition (Microsoft.Subscription/SubscriptionDefinitions)', Level='informational'

This question is not asking how to get the alerts. It is asking how to apply the alert to the new subscription. SO action groups will not do anything, neither will log analytics alerts. Which leave A,D and E. I beleive E is out since you would need to link the policy to the new subscription, it will not link itself automatically. SO down to A&D. D are not used to create new subscriptions that I can find, thus leaving the only answer left as A Runbooks

Based on: The company's compliance team creates automatic alerts by using Azure Monitor. We need to create action group, they are not asking about how to listen for sub creation events...

Correct Answer: E One of the largest benefits of Azure Policy is the insight and controls it provides over resources in a subscription or management group of subscriptions. You organize subscriptions into containers called "management groups" and apply your governance conditions to the management groups. https://docs.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data

Answer is right. Enable multiple Azure VMs, Azure VMSS, or Azure Arc machines by using Azure Policy. This method ensures that on existing and new VMs and scale sets, the required dependencies are installed and properly configured. Noncompliant VMs and scale sets are reported, so you can decide whether to enable them and to remediate them. https://docs.microsoft.com/en-us/azure/azure-monitor/insights/vminsights-enable-overview

I think it should be Azure Monitor Action Group. Question states that new subscription addition is monitored using Azure Monitor to create Alert. Action group can act on alert by means of Webhook or Automation Run Books...What say?

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-enable-template This article shows how you can use an Azure Resource Manager template to configure Azure classic metric alerts. This enables you to automatically set up alerts on your resources when they are created to ensure that all resources are monitored correctly.

Under the EA agreement you can automate creation of subscriptions using Azure Resource Manager. I believe D would be the answer. This article does not say anything about runbooks. https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/programmatically-create-subscription?tabs=rest

Correct Answer E . Log Analytics is for resources…. Whereas Accesspolicy is for Subscription.