Securing Windows Server 2016 — Question 87

Your network contains an Active Directory domain named contoso.com.
You deploy a server named Server1 that runs Windows Server 2016. Server1 is in a workgroup.
You need to collect the logs from Server1 by using Log Analytics in Microsoft Operations Management Suite (OMS).
What should you do first?

Answer options

• A. Create an event subscription
• B. Create a Data Collector-Set
• C. Install Microsoft Monitoring Agent on Server1
• D. Join Server1 to the domain

Correct answer: C

Explanation

The correct answer is C, as the Microsoft Monitoring Agent must be installed on Server1 to enable log collection for Log Analytics. Options A and B are incorrect because creating an event subscription and a Data Collector-Set cannot be performed without the agent installed. Option D is also incorrect because joining the domain is not necessary for log collection with OMS.