AZ-400 Question 277
Select 2You are a DevOps engineer for a retail company that hosts its e-commerce application in an Azure Kubernetes Service (AKS) cluster. The application is already instrumented with Azure Application Insights for application-level metrics, but the operations team also wants to gather container performance data, logs, and events in real time with minimal overhead. Which two actions should you take to configure comprehensive monitoring for your AKS cluster?
- A
Enable Container Insights by linking the AKS cluster to the existing Log Analytics workspace via the Azure portal
- B
Build a custom solution with Azure Functions to pull and parse container logs from AKS nodes
- C
Deploy the Azure Monitor for containers agent as a DaemonSet on each AKS node
- D
Install the Application Insights agent inside each container image
- E
Set up a separate on-premises log aggregator to receive container logs from the cluster
Show answer and explanation
Correct answers: A, C
Explanation
In Azure Kubernetes Service environments, the recommended way to collect metrics and container logs at scale is through Azure Monitor for containers (Container Insights). This approach uses a Log Analytics workspace to store performance data and logs, and a DaemonSet (or extension) to install the monitoring agent on each node. Since your application is already instrumented with Application Insights, you do not need to install another agent within the container images. For more information, refer to the official documentation at https://docs.microsoft.com/azure/azure-monitor/containers/.
- A. Correct.
Option 1 is correct. By enabling Container Insights through the Azure portal and connecting the AKS cluster to an existing Log Analytics workspace, you can gather container-level metrics and logs automatically without custom development overhead.
- B. Incorrect.
Option 2 is incorrect. While you could theoretically pull AKS logs using Azure Functions, this approach increases complexity and overhead. Azure Monitor for containers is built for this exact purpose out of the box.
- C. Correct.
Option 3 is correct. Azure Monitor for containers uses a DaemonSet (or extension) on each node to collect performance data and logs from containers. This is the recommended best practice for container-based workloads in AKS.
- D. Incorrect.
Option 4 is incorrect. Installing the Application Insights agent inside each container image is unnecessary if the application code is already instrumented with the Application Insights SDK. Container Insights will collect container and infrastructure metrics, while the existing instrumentation already handles application-level introspection.
- E. Incorrect.
Option 5 is incorrect. Setting up a separate on-premises log aggregator introduces additional infrastructure and complexity. Azure Monitor for containers, combined with Log Analytics, provides a fully managed monitoring solution.