AZ-400 Question 284
Select 2You are implementing a new microservices-based solution in Azure. Your environment includes an AKS cluster to run containerized microservices, several Azure VMs for background services, multiple Azure Storage accounts for data, and a web front-end instrumented with Application Insights. You want to collect unified telemetry�such as performance metrics, logs, and network data�from all these resources for monitoring and troubleshooting. Which two actions should you take to ensure proper end-to-end telemetry collection?
- A
Install the Azure Monitor agent on each VM and enable VM Insights in Azure Monitor.
- B
Enable Container Insights on the AKS cluster and configure the Log Analytics workspace it should send data to.
- C
Disconnect the default Application Insights resource from the web front-end and rely solely on Azure Monitor metrics.
- D
Enable diagnostic logging on each Azure Storage account and direct the logs to a Log Analytics workspace.
- E
Use Azure Network Watcher to remove network diagnostic settings from all VMs and containers, preventing overlapping telemetry.
Show answer and explanation
Correct answers: A, B
Explanation
To collect unified telemetry from Azure VMs, containers, and your application front-end, you typically enable VM Insights (via the Azure Monitor agent) on VMs and Container Insights on the AKS cluster, along with leveraging Application Insights for your web front-end. Azure Storage accounts also benefit from diagnostic logging, but that alone does not replace the need to properly configure VM Insights and Container Insights. For more details, refer to official Azure Monitor documentation on configuring insights for VMs (https://learn.microsoft.com/azure/azure-monitor/vm/vminsights-overview), containers (https://learn.microsoft.com/azure/azure-monitor/containers/container-insights-overview), and applications (https://learn.microsoft.com/azure/azure-monitor/app/app-insights-overview).
- A. Correct.
Option 1 is correct. Installing the Azure Monitor agent on Azure VMs and enabling VM Insights ensures that performance data (CPU, memory, etc.) and logs are sent to Azure Monitor for tracking and analysis.
- B. Correct.
Option 2 is correct. Enabling Container Insights on an AKS cluster is the recommended approach to gather container-level metrics, logs, and health information for monitoring and troubleshooting microservices.
- C. Incorrect.
Option 3 is incorrect. You should not remove Application Insights from the web front-end. Application Insights is crucial for gathering telemetry like requests, exceptions, and performance metrics for your application code. It works alongside Azure Monitor, rather than replacing it.
- D. Incorrect.
Option 4 is incorrect if chosen alone. While enabling diagnostics on Azure Storage accounts is recommended, it should supplement rather than replace the direct use of VM Insights or Container Insights. However, it is still a good practice to enable diagnostics on storage accounts separately�this alone does not provide full end-to-end telemetry, so it is not one of the two key actions here.
- E. Incorrect.
Option 5 is incorrect. Disabling or removing network diagnostic settings will prevent collection of Network Insights, which helps diagnose network connectivity and performance issues. It is a misguided action and goes against the goal of unified telemetry.