StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Monitoring and troubleshooting · Monitoring and troubleshooting | Monitor by using Windows Server tools and Azure services

Practice question 394 of 506 · medium

For reliable cross-server event analysis, select two practices.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Clear the logs before comparing an incident period
  2. B.Treat every event ID as globally unique
  3. C.Preserve provider and full event details in exported evidence
  4. D.Enable all analytic/debug channels indefinitely by default
  5. E.Align timestamps and time-zone context across systems
Show the answer and explanation

✓ Correct answers

  • Preserve provider and full event details in exported evidence
  • Align timestamps and time-zone context across systems

Provider detail and aligned time support correlation. IDs are not globally unique; clearing removes evidence; unbounded analytic logging can add overhead and excessive data.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.