End of interactive chart.

Intento 1
Todas las preguntas
Pregunta 1: Correcto
Which is correct

None of the above

Event | where EventID == 44 | summarize count() by Computer

(Correcto)

EventID | where EventID == 44 | summarize count() by Computer

Pregunta 2: Incorrecto
You need to return the count of rows in the table, use

All of the above

summarize()

(Incorrecto)

distinct()
 

count()

(Correcto)

Pregunta 3: Correcto
Service Map integrates with other log analytics solutions such as Change tracking
and Security to show you related information.

FALSE

TRUE

(Correcto)

Pregunta 4: Correcto
With pay-as-you-go pricing, you are billed

per MB

per gigabyte (GB)

(Correcto)

per 1TB ingested

 

per day

Pregunta 5: Incorrecto
You need to return the count of unique items in the table, use

count()

(Incorrecto)

All of the above

distinct()

dcount()

(Correcto)

Pregunta 6: Correcto
What all kinds of alerts are valid when using Azure Monitor

Web test - Results of availability test match defined criteria.

(Correcto)
 

Log query - Results of a log query match defined criteria.

(Correcto)

Activity log - Activity log event matches defined criteria.

(Correcto)

Metric - Metric value exceeds a threshold.

(Correcto)

Pregunta 7: Correcto
Which query can be used to view the billable data volume by solution over the last
month

Usage | where TimeGenerated > ago(31d) | where IsBillable == true | render

columnchart | summarize BillableDataGB = sum(Quantity) / 1000. by
bin(StartTime, 1d), Solution

Usage | where TimeGenerated > ago(31d) | where IsBillable == true |

summarize BillableDataGB = sum(Quantity) / 1000. by bin(StartTime, 1d),
Solution

(Correcto)
 

Usage | where TimeGenerated > ago(31d) | summarize BillableDataGB =

sum(Quantity) / 1000. by bin(StartTime, 1d), Solution

Usage | where TimeGenerated > ago(31d)

Pregunta 8: Incorrecto
Which Operating Systems are Log Analytics agent available for?

Windows, Linux

(Correcto)

Linux only

Windows, Linux, Mac, Android Enterprise

Windows Only

Windows, Linux, Mac

(Incorrecto)
Pregunta 9: Incorrecto
Is there a maximum amount of data that you can collect in Azure Monitor?

Yes

(Incorrecto)

No

(Correcto)

Pregunta 10: Incorrecto
What will be the output of this query? Perf | where CounterName == ""% Processor
Time"" | where ObjectName == ""Processor"" | summarize avg(CounterValue) by
bin(TimeGenerated, 15min), Computer, _ResourceId | render timechart"

None of the above

A pie chart

A summary table with CPU utilization

(Incorrecto)

A chart
 (Correcto)

Pregunta 11: Incorrecto
Which query is correct for getting count of results?

Event | count()

(Incorrecto)

Event | count

(Correcto)

All of the above

Event | count(all)

Pregunta 12: Incorrecto
Management Solutions is useful to..

Derive additional insights into an application or service

(Correcto)

Monitor an Azure Resource

 (Incorrecto)

Send additional data to Azure

Manage Azure Subscription

Pregunta 13: 
Omitido
Which query gives count of a Event by eventid

Event | summarize AggregatedValue = count() by EventID

(Correcto)

Eventlog | summarize AggregatedValue = count() by EventID

Eventlog | AggregatedValue of count() by EventID

Event | summarize AggregatedValue = count()

Pregunta 14: 
Omitido
Log Analytics does not support Custom Logs
 

FALSE

(Correcto)

TRUE

Pregunta 15: 
Omitido
A container where log data is stored

Workspace

(Correcto)

Storage Account

Container

DataLake

Pregunta 16: 
Omitido
What options can you choose to control the columns on display
 

project-away

(Correcto)

select

show

project

(Correcto)

Pregunta 17: 
Omitido
There is no limit on the amount of log data that you can collect, but it may be
affected by the pricing tier you choose for the Log Analytics workspace.

TRUE

(Correcto)

FALSE

Pregunta 18: 
Omitido
Can Azure Monitor monitor on-premises resources?

Yes

(Correcto)

No

Pregunta 19: 
Omitido
How many machines can you add to a machine group in service map?

unlimited

100 Servers

2 Servers

10 Servers

(Correcto)

Pregunta 20: 
Omitido
Select all that are true

"FabriKam" contains "BRik"

(Correcto)

"Fabrikam" endswith "Kam"

(Correcto)

"FabriKam" contains_cs "kam"

"Fabrikam" startswith "fab"

(Correcto)

Pregunta 21: 
Omitido
What does this query potentially do? Heartbeat | where TimeGenerated > ago(1d) |
summarize LastHeartbeat = max(TimeGenerated) by Computer | where
isnotempty(Computer) | where LastHeartbeat < ago(1h)

List computers sending heartbeat in last 1 hour

List computers without heartbeat in last 1 hour

 (Correcto)

None of the above

List computers sending heartbeat in last 1 day

Pregunta 22: 
Omitido
Select all that are true

"North America" has "america"

(Correcto)

"North America" !hasprefix "mer"

(Correcto)

"North America" has "amer"

"North America" hasprefix "ame"

(Correcto)
Pregunta 23: 
Omitido
How can you show only the required columns

project col1,col2

(Correcto)

display col1,col2

Select col1,col2

show col1,col2

Pregunta 24: 
Omitido
You can configure a daily cap and limit the daily ingestion for your workspace

TRUE

(Correcto)

FALSE

Pregunta 25: 
Omitido
How can you restrict the number of rows returned

limit 100

(Correcto)

restrict 100

count 100

select 100

Pregunta 26: 
Omitido
What is multi homing

Send data to Log Analytics and Immutable Storage

Allows to send data to multiple Log Analytics workspaces

(Correcto)


 New agent MSFT introduced to suport Work from home scenario

Pregunta 27: 
Omitido
Which is the best query to search Event logs for event ID 5145 or 5156 in the past
31 days

Event | where EventID == 5145 or EventID == 5156

Event | where TimeGenerated > ago(31d) | where EventID == 5145 or

EventID == 5156 | where _IsBillable == true | summarize count(),
Bytes=sum(_BilledSize) by EventID, bin(TimeGenerated, 1d)

Event | where TimeStamp > ago(31d) | where EventID == 5145 or EventID

== 5156 | where _IsBillable == true

Event | where TimeGenerated > ago(31d) | where EventID == 5145 or

EventID == 5156

(Correcto)

Pregunta 28: 
Omitido
The Log Analytics agent can be used for collecting data from

virtual machines and servers in on premises environment.

(Correcto)
 

virtual machines in Azure

(Correcto)

virtual machines another cloud like AWS, GCP

(Correcto)

Pregunta 29: 
Omitido
What does the query potentially do? Heartbeat | where TimeGenerated >
startofday(ago(31d)) | summarize nodes = dcount(Computer) by
bin(TimeGenerated, 1d) | render timechart

A timechart with summary of nodes sending heartbeat in the last 1 day

A count of nodes sending heartbeat in the last 31 days

A timechart with count of nodes sending heartbeat in the last 31 days

(Correcto)

A list of nodes sending heartbeat in the last 31 days

Pregunta 30: 
Omitido
You want to find Linux kernel events Which query lets you find events reported by
Linux kernel process, regarding killed processes.

Syslog | where ProcessName == "kernel" and SyslogMessage contains

"Killed process"

(Correcto)

Syslog | where ProcessName -eq "kernel" and SyslogMessage contains

"Killed process"

None of the above

Pregunta 31: 
Omitido
Select all that are true

"abc" =~ "ABC"

(Correcto)

"abc" != "ABC"

(Correcto)
 

"aBc" == "aBc"

(Correcto)

"aBc" !~ "xyz"

(Correcto)

Pregunta 32: 
Omitido
All log data collected by Azure Monitor is stored in a Log Analytics workspace.

FALSE

TRUE

(Correcto)

Pregunta 33: 
Omitido
What log types are supported by log analytics?

Windows Event logs

(Correcto)


 Performance Counters

(Correcto)

Custom Logs

(Correcto)

Syslog

(Correcto)

IIS Logs

(Correcto)

Pregunta 34: 
Omitido
How can you access data collected by Azure Monitor?

using a log query written in Kusto Query Language (KQL)

(Correcto)

using Microsoft provided reports

 

Log Query language

T-SQL Queries

Pregunta 35: 
Omitido
You want to do a NON-case sensitive comparison, which will you use?

None of the above

Use =~

(Correcto)

Use ==

Pregunta 36: 
Omitido
What information is required to configure the log analytics agent

Primary Key or Secondary Key


 Workspace Name & URL

Secondary Key & URL

Workspace ID and Key

(Correcto)

Primary key & URL

Pregunta 37: 
Omitido
The amount of data ingestion depends on the following factors: Number of
management solutions enabled and their configuration Number of VMs monitored
Type of data collected from each monitored VM

TRUE

(Correcto)

FALSE

Pregunta 38: 
Omitido
Service Map requires additional agent to be installed on the target system.


 FALSE

TRUE

(Correcto)

Pregunta 39: 
Omitido
What does the query potentially do? find where TimeGenerated > ago(24h) project
Computer | extend computerName = tolower(tostring(split(Computer, '.')[0])) |
where computerName != "" | summarize nodes = dcount(computerName)

Gets a list of nodes sending data in the last 24 hours

Gets a count of nodes sending data in the last 24 hours

Gets a count of distinct nodes

Gets a count of distinct nodes sending data in the last 24 hours

(Correcto)

Pregunta 40: 
Omitido
Which time zone is used to display the query results by default


 UTC

(Correcto)

GMT

Local Time

Pregunta 41: 
Omitido
You need to return unique items in the table, use

distinct

(Correcto)

count

All of the above

dcount

Pregunta 42: 
Omitido
An alert rule is charged based on the type and number of signals that it monitors.
A signal can be

a resource metric

(Correcto)

a logic app trigger

a log query

(Correcto)

an activity log event

(Correcto)

Pregunta 43: 
Omitido
Log Analytics agent can send data to Azure Monitor Metrics, Azure Storage, or
Azure Event Hubs.

TRUE

FALSE
 (Correcto)

Pregunta 44: 
Omitido
How can you limit the number of results returned by a query

Perf |limit 100

(Correcto)

Perf | max_results 100

Perf |top 100

Perf |return 100

Pregunta 45: 
Omitido
Azure Monitor collects data from a variety of sources including ___

metrics from Azure platform and resources

(Correcto)

logs from resources

 (Correcto)

logs from custom applications

(Correcto)

logs from Azure platform

(Correcto)

Pregunta 46: 
Omitido
Which is correct

Event | Time > ago(1h)

Event | where TimeGenerated > ago(1h)

(Correcto)

Pregunta 47: 
Omitido
What is the most basic form of query you can run

TableName e.g. Perf

(Correcto)
 

search in (TableName) e.g. search in (Event) "Error"

TableName | sample e.g. Perf | sample 10

TableName | limit 10 e.g. Perf | limit 10

TableName |where condition e.g. Event | where ErrorLevelName == "Error"

Pregunta 48: 
Omitido
I get the error: "Register resource provider 'Microsoft.Insights' for this
subscription to enable this query" when opening Log Analytics from a VM? What
should you do?

refresh the page

manually register the resource provider for the subscription

(Correcto)

manually register the resource provider for the VM

 

Change the query

Pregunta 49: 
Omitido
Select the statements that are true

All of the above

You can move a workspace between different regions.

You can move a workspace between resource groups.

(Correcto)

You can move a workspace between subscriptions

(Correcto)

Explicación
You can move a workspace between resource groups or subscriptions but not to a
different region.
Pregunta 50: 
Omitido
Service Map can help find Failed connections originating from onboarded servers


 TRUE

(Correcto)

FALSE

Pregunta 51: 
Omitido
Data ingested into Azure Monitor Log Analytics workspace can be retained at no
charge for up to

93 days

30 days

90 days

180 days

31 days

(Correcto)

Pregunta 52: 
Omitido
Search application events for "Error" in last 24 hours

Event | where EventLog == "Application" | where TimeGenerated > ago(24h)

| where RenderedDescription contains "Error"

(Correcto)

ApplicationEvents | where TimeGenerated > ago(1d) | where

RenderedDescription contains "Error"

Event | where TimeGenerated > ago(24h) | where RenderedDescription

contains "Error"

Pregunta 53: 
Omitido
What data is collected by Dependency agent

Process information

Process dependencies & Network connection metrics

(Correcto)

Azure Migrate information

 

Dependency data

Pregunta 54: 
Omitido
Service Map requires

Log Analytics Agent

(Correcto)

Dependency Agent

(Correcto)

Pregunta 55: 
Omitido
Which Solution helps track log analytics agent health.

Azure Log Analytics Agent Health

(Correcto)

Active Directory Health Check

Activity Log Analytics

 

Alert Management

Pregunta 56: 
Omitido
Data retention at the workspace level can be configured from 30 to 730 days (2
years) for all workspaces

FALSE

TRUE

(Correcto)

Pregunta 57: 
Omitido
What is the maximum number of query results returned by default

50000

10000

(Correcto)

1000
 

Unlimited

Pregunta 58: 
Omitido
Even Free Solutions can result in additional cost

FALSE

TRUE

(Correcto)

It Depends

Pregunta 59: 
Omitido
Maximum possible data retention in Log Analytics workspace

31 days

365 days


 Unlimited

730 days

(Correcto)

Pregunta 60: 
Omitido
Log Analytics agent is used for services such as Change Tracking, Update
Management, and Azure Security Center.

TRUE

(Correcto)

FALSE

Continuar
Repetir la prueba