Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Solutions Architect Expert · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
To meet your requirements efficiently, I recommend the following solutions: Trigger on-demand Azure Policy compliance scans Use the Azure Policy 'Evaluate Compliance' action in the Azure Portal or PowerShell command: powershell Invoke-AzPolicyComplianceScan -ResourceGroupName <ResourceGroupName> This forces an immediate compliance assessment of your storage accounts instead of waiting for the scheduled evaluation cycle. Raise Azure Monitor non-compliance alerts using Log Analytics Configure Azure Monitor alerts based on Azure Policy compliance logs stored in Log Analytics. Use Kusto Query Language (KQL) to query non-compliant resources: kql PolicyResources | where ComplianceState == "NonCompliant" Create an Azure Monitor alert rule based on this query to notify administrators whenever a storage account violates policy.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
To meet your requirements efficiently, I recommend the following solutions: Trigger on-demand Azure Policy compliance scans Use the Azure Policy 'Evaluate Compliance' action in the Azure Portal or PowerShell command: powershell Invoke-AzPolicyComplianceScan -ResourceGroupName <ResourceGroupName> This forces an immediate compliance assessment of your storage accounts instead of waiting for the scheduled evaluation cycle. Raise Azure Monitor non-compliance alerts using Log Analytics Configure Azure Monitor alerts based on Azure Policy compliance logs stored in Log Analytics. Use Kusto Query Language (KQL) to query non-compliant resources: kql PolicyResources | where ComplianceState == "NonCompliant" Create an Azure Monitor alert rule based on this query to notify administrators whenever a storage account violates policy.
Box 1: CLI https://learn.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data#azure-cli Box 2: Log Analytics Workspace If you have a Log Analytics workspace with AzureActivity from the Activity Log Analytics solution tied to your subscription, you can also view non-compliance results from the evaluation of new and updated resources using Kusto queries and the AzureActivity table. With details in Azure Monitor logs, alerts can be configured to watch for non-compliance. https://learn.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data#azure-monitor-logs
box1: CLI box2: log analytic workspace I guess it's like configuring diagnostics IN the activity log FOR the log analytic workspace, in which we can query logs to find non-compliance and generate alerts.