Exam AZ-500 topic 4 question 55 discussion

Actual exam question from Microsoft's AZ-500

Question #: 55
Topic #: 4

SIMULATION -
You need to ensure that the events in the NetworkSecurityGroupRuleCounter log of the VNET01-Subnet0-NSG network security group (NSG) are stored in the logs1234578 Azure Storage account for 30 days.
To complete this task, sign in to the Azure portal.

Show Suggested Answer

Suggested Answer: See the explanation below.
You need to configure the diagnostic logging for the NetworkSecurityGroupRuleCounter log.
1. In the Azure portal, type Network Security Groups in the search box, select Network Security Groups from the search results then select VNET01-
Subnet0-NSG. Alternatively, browse to Network Security Groups in the left navigation pane.
2. In the properties of the Network Security Group, click on Diagnostic Settings.
3. Click on the Add diagnostic setting link.
4. Provide a name in the Diagnostic settings name field. It doesn't matter what name you provide for the exam.
5. In the Log section, select NetworkSecurityGroupRuleCounter.
6. In the Destination details section, select Archive to a storage account.
7. In the Storage account field, select the logs1234578 storage account.
8. In the Retention (days) field, enter 30.
9. Click the Save button to save the changes.

by ahmadmohdrudin at Sept. 14, 2022, 4:51 p.m.

Comments

Submit Cancel

ahmadmohdrudin

Highly Voted 2 years, 2 months ago

Solution provided is correct. Tested in LAB

upvoted 7 times

...

epomatti

Most Recent 11 months, 1 week ago

Partially deprecated. Retention must now be configured via Lifecycle Management rules within the Storage. https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/migrate-to-azure-storage-lifecycle-policy?tabs=portal

upvoted 2 times

...