Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 10 of 225
Free Preview · 225 of 749 · questions 1–225 of 749 are free. Sign up free to sync your progress across devices.
Drag & Drop Scenario
Read the scenario requirements and decide your answer. Click Check Answer below to see the marked solution.
Hotspot Solution:
The given answer is correct. Event: For Windows VMs, the Event table provides a structured and centralized way to collect and analyze system and application events. It’s essential for monitoring security events, such as unauthorized access attempts, system errors, and other critical events logged by the Windows Event Viewer. Syslog: For Linux VMs, Syslog provides a similar capability by capturing system and application logs. It is essential for monitoring Linux-specific events, ensuring that you can track security-related incidents like failed SSH login attempts or application-specific warnings and errors.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Remember "Event Viewer" for Windows helps me every time.
The given answer is correct. Event: For Windows VMs, the Event table provides a structured and centralized way to collect and analyze system and application events. It’s essential for monitoring security events, such as unauthorized access attempts, system errors, and other critical events logged by the Windows Event Viewer. Syslog: For Linux VMs, Syslog provides a similar capability by capturing system and application logs. It is essential for monitoring Linux-specific events, ensuring that you can track security-related incidents like failed SSH login attempts or application-specific warnings and errors.
To design an alerting strategy for security-related events in Azure Monitor, you should query the following Azure Monitor Logs tables: 1. SecurityEvent - This table contains security events and other system events that are generated by Windows operating systems. The table includes information about the event, such as the event ID, event source, and severity level. 2. Syslog - This table contains security-related events and other system events that are generated by Linux and other Unix-based operating systems. The table includes information about the event, such as the facility and severity level.