Monitor and maintain Azure resources

AZ-104 · 20 questions

• At Cascade Regional Airlines, a ramp operations dashboard needs to show live CPU and memory trends for the gate-check-in VMs at Denver with only a few minutes of delay, refreshed continuously through the shift. Which Azure Monitor data store is purpose-built for this kind of lightweight, near-real-time numerical trend?
• Cascade Regional Airlines runs 40 web and application servers supporting the booking site across two regions. The operations team wants to run a single Kusto query that correlates failed sign-ins across every one of those servers at once. What should the servers be configured to send their logs to?
• An engineer at Cascade Regional Airlines is onboarding new reservation servers to Azure Monitor Agent and needs to define exactly which Windows event log channels and performance counters get collected, and which Log Analytics workspace they are sent to. Which object should the engineer create to define this?
• During a compliance audit, Cascade Regional Airlines' security team tries to query sign-in log records from 120 days ago in their Log Analytics workspace and gets no results, even though the servers were sending data the whole time. The workspace was never customized. What is the most likely explanation?
• The booking-site VMs at Cascade Regional Airlines need to page the on-call engineer whenever CPU utilization stays above 85% for 10 minutes. The team wants this evaluated against the numeric performance counter itself, with no custom query written. Which Azure Monitor alert type fits?
• Security analysts at Cascade Regional Airlines want to be notified whenever more than 20 failed login attempts against the crew-scheduling portal occur from the same IP address within 5 minutes. This requires filtering, grouping, and counting structured sign-in records. Which Azure Monitor alert type should they configure?
• Cascade Regional Airlines wants an immediate notification any time someone deletes a resource group in the subscription, so leadership can be alerted quickly if it happens outside a planned maintenance window. An engineer configures a metric alert on the subscription scope, but it never fires when a test resource group is deleted. What is the most likely reason, and what should be configured instead?
• When a critical alert fires against the booking-site infrastructure at Cascade Regional Airlines, the on-call runbook requires that an email go to the ops distribution list, a text message go to the on-call engineer's phone, and a ticket be automatically created in the ITSM system, all from the same alert. Which Azure Monitor object bundles these three notification actions together?
• Cascade Regional Airlines is patching the reservation database cluster during a planned 2-hour maintenance window and expects a burst of expected CPU and connectivity alerts during that time. The team does not want to disable or edit each of the dozens of existing alert rules, but does want notifications suppressed only for that window and only for that resource group. What should they configure?
• Cascade Regional Airlines' booking site sees normal traffic swings between weekdays and weekends, and again during holiday travel peaks, making any single fixed CPU threshold either too noisy on busy days or too insensitive on quiet ones. Which metric alert configuration adapts the threshold automatically to these learned patterns?
• An auditor investigating a data-loss incident at Cascade Regional Airlines asks which storage account blobs were deleted and by whom last Tuesday. The engineer checks the subscription's activity log and finds no matching entries, even though the storage account itself was never modified. What is the correct explanation?
• Cascade Regional Airlines needs resource-level logs from its API Management gateway to land simultaneously in a Log Analytics workspace for querying, an event hub for a third-party SIEM to consume, and a storage account for long-term archival. Which single Azure Monitor mechanism configures all three destinations for that resource?
• Leadership at Cascade Regional Airlines wants a single interactive report that combines a CPU trend chart from metrics, a table of recent failed deployments from logs, and a written summary, refreshed on demand and shareable as a saved view. Which Azure Monitor feature is designed for this kind of combined, interactive report?
• An engineer at Cascade Regional Airlines enables VM insights on the crew-scheduling application's VMs, expecting to see a dependency map showing which processes talk to which other machines. The performance charts appear, but the dependency map stays empty. What is the most likely missing piece?
• Cascade Regional Airlines wants nightly backups of its crew-scheduling VMs retained for 30 days, with a separate weekly backup retained for a full year for audit purposes. Where is this schedule and retention behavior defined once the VMs are enrolled in a Recovery Services vault?
• Cascade Regional Airlines needs to back up both its crew-scheduling Windows VMs and a set of Azure Database for PostgreSQL flexible servers holding flight-schedule data. The VM backups are already working through a Recovery Services vault. Where should the PostgreSQL backups be configured instead?
• The gate operations team at Cascade Regional Airlines stores shared flight-manifest documents on an Azure file share and wants scheduled, application-consistent backups with the ability to restore individual files without restoring the whole share. Which Azure Backup capability should they use?
• A reservation-database VM at Cascade Regional Airlines was corrupted by a bad configuration change. The team wants to keep the original VM running untouched for forensic review while standing up a fully working replacement from last night's recovery point under a different name. Which Azure Backup restore option fits?
• Cascade Regional Airlines wants its booking-site VMs in the primary region to be continuously kept in sync with standby VMs in a secondary region, so that a regional outage causes only minutes of data loss rather than requiring a restore from last night's backup. Which Azure service provides this kind of ongoing, near-continuous replication between regions?
• During a scheduled DR rehearsal, Cascade Regional Airlines wants to prove that its replicated booking-site VMs can start up correctly in the secondary region, without interrupting the live production site still running in the primary region or affecting ongoing replication. Which Azure Site Recovery operation should they run?