Auditors require an immutable evidence archive, while operators need KQL investigations on the same resource logs. Which two destinations should the design use? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Only Resource Health.
B.Only an Azure Monitor workspace for Prometheus.
C.Azure Storage with an appropriate immutable retention policy.
D.Log Analytics workspace.
E.Only an action group webhook.

Show the answer and explanation

✓ Correct answers

Azure Storage with an appropriate immutable retention policy.
Log Analytics workspace.

Log Analytics provides interactive log queries; immutable Storage supplies an independently protected archive. Webhooks are alert-response endpoints, a Prometheus workspace stores metrics, and Resource Health reports resource health. None of those three replaces the required audit archive or KQL log destination. Source: AZ-305 Study Guide.pdf, PDF page(s) 9.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.