8.5.8 & 8.4.5 &8.1.9 Practice questions

8. mangement is a feature of azure monitor. What is its main focus?

***** the updates and patches for all from a central location

8. What is the minimum amount of data collection time required for system insights to start providing predictive analysis?

180 days

6. You would like to configure Event Subscriptions on your Windows system to forward events to a network server. You need to configure your computer as a source computer for a collector-initiated subscription. Which of the following will be part of your configuration? (Select two.)

Add the collector computer to the event log readers group AND run the winrm qc command

4. Which of the following is a characteristic of azure monitor alerts?

An alert rule monitors your data and grabs a signal that indicates something is happening on a particular resource

3. which azure feature is similar to log analytics but specifically designed for virtual machines, allowing data gathering and sending to different azure services?

Azure diagnostics extension

8.4.5-1. Your company wants to monitor their azure VMs and collect data from the guest OS. Which azure monitor agent should they use?

Azure diagnostics extension

9. azure monitor is a tool used for managing hybrid networks. what is the first step to using azure monitor?

Configure Log analytics workspace and assign network resources to those workspaces

9. You manage two Windows systems named Computer 1 and Computer 2. You have configured Event Subscriptions with the default settings to forward events from these two computers to a third Windows system named Computer 3. How do you view the events from these two computers on Computer 3?

In event viewer, open the forwarded events log

7. What is the role of the Microsoft monitoring agent in on - premises servers?

It collects and sends data to the workspace

6. What is the role of the Log Analytics agent in a hybrid resource setup?

It gathers data from hybrid resources and sends it to Log analytics workspace

2. Which of the following can be used to create a new alert rule in the azure portal?

Monitor - alerts -+ create - alert rule

7. You have two Windows systems named Computer 1 and Computer 2. Over the next few days, you want to be able to monitor Computer 1 from Computer 2. To do this, you want to automatically save and send Computer 1's Application and System logs to Computer 2.how should you do this?

On both computers, enable and configure event subscriptions. Configure computer 1 as a source and computer 2 as a collector

4. You are troubleshooting a problem that keeps occurring on your Windows system. When the problem happens, Event Viewer shows several Error events in the Application and System logs. From a single view, you would like to see only Error events from both the Application and the System logs. What can you do in Event Viewer to make this happen?

On the application log, filter the log to show only error events. Save the filter to a custom view and then add the system event log as an additional filter.

10. You manage three Windows systems that are part of a Workgroup. You would like to configure Event Subscriptions so that you can view all events from those computers on your Windows notebook. You need to configure the three source computers and one collector computer. The subscription will be a source-initiated subscription. What should you do? (Select two. Each answer is part of the complete solution.)

On the collector computer, configure the subscription AND On all four computers, run the winrm qc -q command. On the collector computer, run the wecutil qc /q command.

10. When implementing windows admin center (WAC) which of the following can be configured to assign specific management functions?

Role-based access

8. You would like to configure Event Subscriptions on your Windows system to forward events to a network configure your computer as a source computer for a source-initiated subscription. Which of the following will be part of your configuration? (Select two.)

Run the winery qc -q command AND configure the local security policy to identify the FQDN of the collector computer

5. You are troubleshooting a problem that keeps occurring on your Windows system. When the problem happens, there are several Warning and Error events logged to the Application log in Event Viewer. You create a Custom View that shows only Warning and Error events. During troubleshooting, you filter the Custom View to show only the Error messages. How can you create a new Custom View using the current filter settings?

Save the filter to a custom view

4. What happens once VM insights is set up and connected to your servers?

You can configure data collection rules that determine the type of data collected and what to do with it.

8.1.9- 1. As part of the regular system maintenance on your Windows system, you are checking Performance Monitor statistics a events. You notice that there are several Error events listed with the same ID number. They also contain a description that soun error is related to system hardware. You check your Performance Monitor logs but don't notice anything unusual arounc the events were generated. Which step must you take to receive an email every time the event is logged so you can check the system statistics at that

attach a task to the event

10. You need to enable azure update management and azure monitor for VMs. what tool can be intreated into windows admin to provide this functionality?

azure monitor

9. Which of the following can be integrated with windows admin center (WAC) to enable azure update management and azure monitor for VMs?

azure monitor

3. On your Windows system, you run a custom application that was developed in-house. The application generates Event Viewer events and logs those events to the default Application and the Security logs i As you monitor the application, you would like to be able to do the following: View all events related to the application from a single log. View only the events related to the application and no others. View the necessary events with minimal future configuration. Save the Event Viewer configuration so that you can easily export and import the solution to other servers that will blank the application

create a custom view

1. What does azure monitor do once enough data is collected?

it establishes a baseline and can be configured to automatically send emails when resources are reported or predicted to fall out of a healthy range

3. Which of the following is a type of alert that can be created using the azure command line interface (CLI)

metric

2. Using Event Viewer, you have created a Custom View to track Warning and Error events from both the Application and System logs. After a few days, there are several events in the Custom View. You would like to clear the messages from the view so that you only see messages starting from today. How do you make sure that any messages from today that are in the corresponding logs still exist?

Edit the custom view properties and create a custom range for the logged events, starting with todays date

5. What tool can be used to surpass some limitations of the azure diagnostics extension?

Log Analytics agent

5. Which of the following cmdlets can be used to create a log alert using powershelgl in azure monitor?

New - azScheduledQueryRule

7. Which of the following is a simple indicator by system insights in its analysis

OK

2. What is a requirement for installing and using the azure diagnostics extension?

The VM and storage account must be in the same region

6. Which of the following are characteristics of data collection rules (DCR) in azure monitor?

They specific what data is collected, how to transform its and where to send it