week_5

What’s the advantage of linking Azure Monitor to Log Analytics Workspace?

• Enables email alerts
• Allows advanced query and retention controls
• Grants access to Azure Advisor
• Improves VM performance

Answer explanation

Linking allows rich querying (KQL), retention customization, and integration with other Azure services.

In Azure Monitor, what type of rule triggers actions based on numerical values?

• Activity log alert
• Metric alert
• Log alert
• Action group

Answer explanation

Metric alerts respond to numerical thresholds like CPU > 80%.

Which feature helps correlate traces, metrics, and logs across distributed systems?

• NSG Flow Logs
• Log Analytics Workspace
• Distributed Tracing
• Azure Arc

Answer explanation

Distributed tracing enables following a request through various services for full correlation.

What’s the best KQL operator to group and count occurrences?

• summarize
• where
• project
• extend

Answer explanation

summarize is used for aggregating and counting grouped data.

What does Application Insights auto-instrumentation provide?

• NSG monitoring
• Real-time cost alerts
• Automatic collection of telemetry (requests, exceptions, dependencies)
• Role-based access control

Answer explanation

Auto-instrumentation captures app telemetry without code changes.

What’s a recommended best practice for managing alert fatigue in large teams?

• Send alerts to everyone
• Use static thresholds for all metrics
• Group alerts and use severity levels
• Disable alerts overnight

Answer explanation

Grouping and prioritizing alerts helps teams focus on what's critical.

In an AKS environment, where are logs from containers stored by default if Container Insights is enabled?

• Azure Files
• Log Analytics Workspace
• Azure Blob Storage
• Azure Monitor Metrics

Answer explanation

Container Insights sends logs to Log Analytics Workspace by default.

Why would you use parse in a KQL query?

• To export data to Excel
• To break down and extract values from structured strings
• To log performance metrics
• To compress logs

Answer explanation

parse helps extract fields from formatted strings like JSON or delimited text.

You want to detect a spike in request failures in real time. Which service should you use?

• Azure Policy
• Azure Resource Graph
• Application Insights Alerts
• NSG Flow Logs

Answer explanation

Application Insights Alerts can notify on increasing failed request rates.

What is one limitation of Azure Monitor when compared to third-party APM tools?

• Doesn’t support KQL
• No integration with Azure Functions
• Limited AI/ML-based predictions
• No metric collection

Answer explanation

While powerful, Azure Monitor has fewer predictive analytics capabilities compared to some APM tools.