Securing Windows Server 2016 — Question 24

Your network contains several secured subnets that are disconnected from the Internet.
One of the secured subnets contains a server named Server1 that runs Windows Server 2016.
You implement Log Analytics in Microsoft Operations Management Suite (OMS) for the servers that connect to the Internet.
You need to ensure that Log Analytics can collect logs from Server1.
Which two actions should you perform? Each correct answer presents part of the solution.

Answer options

• A. Install Microsoft Monitoring Agent on Server1.
• B. Install the OMS Log Analytics Forwarder on Server1.
• C. Create a scheduled task on Server1.
• D. Install the OMS Log Analytics Forwarder on a server that has Internet connectivity.
• E. Create an event subscription on a server that has Internet connectivity.

Correct answer: A, E

Explanation

Installing the Microsoft Monitoring Agent on Server1 is necessary for it to send data to OMS. Creating an event subscription on a server with Internet connectivity allows the logs from Server1 to be collected and sent, while the other options either do not directly facilitate log collection from Server1 or are not relevant for the scenario.