AZ-104 Question 246
Single answerYou manage an Azure environment with multiple resource groups in two subscriptions and need to centrally monitor CPU usage across all virtual machines. You also want to be alerted when CPU usage exceeds 90% for 10 minutes and plan to collect event logs for auditing. Which approach best meets these requirements?
- A
Set up Activity Log alerts in each subscription to capture CPU metrics and event logs separately
- B
Implement Azure Monitor with a single Log Analytics workspace to create metric alerts and log queries across both subscriptions
- C
Enable Azure Advisor recommendations and configure performance alerts for each subscription
- D
Use Azure Sentinel to automatically collect and analyze CPU metrics and event logs in real time
Show answer and explanation
Correct answer: B
Explanation
Using Azure Monitor with a centralized Log Analytics workspace is the most efficient way to gather CPU metrics and event logs from all VMs and resource groups across multiple subscriptions, allowing you to create unified alerts and an easily managed monitoring solution.
- A. Incorrect.
Activity Log alerts primarily capture control-plane events and do not provide unified CPU metric alerts across subscriptions without additional configuration
- B. Correct.
Azure Monitor with a single Log Analytics workspace offers centralized, multi-subscription metric alerts and log collection, which meets both performance monitoring and auditing needs
- C. Incorrect.
Azure Advisor provides best-practice recommendations but is not a central monitoring or alerting solution for CPU usage or log collection
- D. Incorrect.
While Azure Sentinel can collect and analyze data, it is designed for security analytics rather than general performance monitoring, and could be overly complex for this requirement