Microsoft Azure Administrator (legacy) — Question 74

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure virtual machine named VM1 that runs Windows Server 2016.
You need to create an alert in Azure when more than two error events are logged to the System log on VM1 within an hour.
Solution: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in
Azure Monitor and specify the Log Analytics workspace as the source.
Does this meet the goal?

Answer options

Correct answer: A

Explanation

The solution is correct because creating an Azure Log Analytics workspace, installing the Microsoft Monitoring Agent, and setting up an alert in Azure Monitor allows for the monitoring of logs and the triggering of alerts based on specific criteria. The other option, 'No', is incorrect as the proposed solution indeed meets the requirement of alerting on error events in the System log.