| Interpret metrics in Azure Monitor |
- Questions test which Azure tool to use for cost optimisation and resource right-sizing — given a requirement to quickly identify underutilised virtual machines that could be moved to a cheaper tier, you need to know which portal blade provides this type of recommendation as opposed to raw performance metrics or monitoring dashboards.
|
| Configure log settings in Azure Monitor |
- Questions test which resource types can be configured as data sources in a Data Collection Rule, which resource types can be configured as destinations, and which query language applies for filtering specific data source types. You need to know the supported source and destination resource types for DCRs, and how they differ.
|
| Query and analyze logs in Azure Monitor |
- Questions test which resource to create when you need to run interactive queries against collected network diagnostic data — you need to know which Azure service stores logs in a way that supports interactive querying from the portal, and distinguish it from options like Event Grid or Storage accounts which serve different purposes.
|
| Set up alert rules, action groups, and alert processing rules |
- Questions test how alert rules and alert processing rules interact, including how suppression rules affect whether notifications are sent and whether alerts still appear in the portal. You need to understand the distinction between an alert being fired and a notification being sent, and how time-scoped suppression rules affect each.
- Questions test the minimum number of alert rules and action groups required for a set of monitoring requirements — each unique signal (metric or activity log) needs its own alert rule, while multiple alerts notifying the same set of recipients can share a single action group. You need to calculate the minimum counts given a table of signals and recipient lists.
- Questions test the correct sequence of steps to set up VM performance metric alerts using Log Analytics — you need to know which resource to create first, what data must be collected next, and which step produces the alert.
- Questions test what alert user response state transitions are permitted — given an alert currently in a specific state (New or Closed), you need to identify which states it can be changed to and which transitions are not allowed.
- Questions also test which resource to enable diagnostics on when the goal is to capture IP connection data for interactive querying — you need to know which resource in a network path (NSG, load balancer, VM) generates the relevant connection logs.
- Questions present an action group configuration and a high-frequency alert trigger — you need to calculate the number of email or SMS notifications sent per hour, knowing that action groups apply rate limiting to each notification type independently.
- Questions present two activity log alert rules with different scopes (resource group vs individual resource) and ask which rules are triggered by a specific user action — operations performed on a resource trigger alerts scoped to that resource AND alerts scoped to its parent resource group; but operations on the resource group itself (like tagging the RG) trigger only the RG-scoped alert, not the resource-scoped alert.
- Questions ask which target resource to specify in an alert rule when monitoring for specific Windows event log entries from a VM — because event log data is collected into a Log Analytics workspace rather than being a native VM metric, the alert must target the Log Analytics workspace, not the VM or a VM extension.
|
| Configure and interpret monitoring of VMs, storage accounts, and networks |
- Questions test the correct order of steps to ensure VMs communicate with Azure Monitor only through a private virtual network.
- Questions test which dependencies must exist before enabling Traffic Analytics, distinguishing them from other Azure Monitor resources that are not required for this feature.
- Questions test which Azure Monitor tool to use for a specific monitoring need — given a requirement for a network topology view combined with detailed metrics in a single dashboard, you need to identify the correct tool and distinguish it from similar options like Network Watcher or Log Analytics.
- Questions test Connection Monitor deployment requirements — given VMs spread across multiple regions, you need to determine the minimum number of connection monitors required to cover all connectivity paths to an on-premises network.
- Questions test what must be configured first when collecting specific log types from VMs using the Azure Monitor Agent — you need to know which resource defines the data sources and destinations and must be created before log collection can begin.
- Questions test the prerequisite step for enabling suspicious traffic detection via Azure Monitor Network Insights — given a scenario with NSGs connected to VM NICs and an existing Log Analytics workspace, you need to identify what must be configured first before the Network Insights alert can function.
- Questions test which tool is correct for deep traffic inspection between two VMs for a limited time window — you need to distinguish between Azure Monitor metrics, Network Watcher connection monitors, and other diagnostic tools, and know which one captures actual packet-level traffic as opposed to connection-level or volume statistics.
|
| Create a Recovery Services vault |
- Questions test which resource types a Recovery Services vault can protect, which vault to use for a given resource type, and the correct sequence of steps to set up a VM backup with a specific storage redundancy option. You need to know the order in which vault creation, redundancy configuration, and backup policy assignment must occur.
- Questions test the correct three-step sequence to set up selective disk backup using an Azure Backup vault — you need to know the prerequisite identity configuration step, which vault type to use, and what must be created before configuring the backup policy.
- Questions test where an agentless VM backup (using Azure Backup without the MARS agent) can be restored — you need to know which destination options are valid for full VM restore versus file-level recovery, and how this differs from agent-based backups.
- Questions test the prerequisite step when restoring a folder-level backup taken with the MARS agent to a different VM — you need to know which agent and on which machine must be installed before the restore can proceed.
- Questions present a case study environment with file shares and VMs across multiple regions and ask for the minimum number of Recovery Services vaults needed — you need to know that a single vault can protect resources across resource groups but is constrained by region, and apply this to calculate the true minimum.
- Questions test what must happen first when a vault already exists and you need to protect VMs in a different region — you need to know whether a new vault is required or whether an existing vault can be extended.
- Questions test which resource must be created to enable multi-user authorisation (MAU) for a Recovery Services vault — you need to know which specific resource type acts as the authorisation control for critical vault operations.
- Questions test the first step in a VMware to Azure migration workflow after creating a Recovery Services vault — you need to know what must be deployed into the source vSphere environment before replication can begin.
- Questions test the meaning of the Backup Pre-Check Warning status for a VM — a Warning (as opposed to an error) indicates that backup will proceed but a non-blocking issue exists, such as the Azure VM Agent being outdated. You need to know which conditions trigger Warning versus which trigger a critical failure that prevents backup entirely.
|
| Create an Azure Backup vault |
- Questions test the distinction between an Azure Backup vault and a Recovery Services vault. Given a specific resource type (VM, managed disk, web app, SQL database), you need to identify which vault to use. These two are commonly confused on the exam.
- Questions go further and test which storage sub-resources can be backed up at all — file shares can be backed up to a Recovery Services vault, but blob containers are not a supported backup source in either vault type and must be protected through other means such as blob soft delete or versioning.
|
| Create and configure a backup policy |
- Questions test what backup frequency options are available for different resource types, how to read a backup policy to determine the retention period that applies to a specific backup based on its date, and which Azure object must be configured to define the backup schedule and retention settings for a VM.
- Questions test backup policy compatibility with VM security configurations — given VMs with specific security features enabled (such as Azure Disk Encryption or Trusted Launch) and a set of policies with different types (Standard, Enhanced), you need to determine which policy can be used to back up each VM. Not all policy types support all security configurations.
- Questions also test case study scenarios requiring you to calculate the minimum number of backup policies needed — different resource types (VMs vs file shares) and different backup schedules each require their own policy, and you need to count the distinct combinations.
|
| Perform backup and restore operations by using Azure Backup |
- Questions test the correct sequence of steps to restore specific files from a VM backup — you need to know which recovery option to use for file-level restore and the steps to access and copy files once a recovery point is selected.
- Questions test the scope of what the "Replace existing" restore option restores — given a list of changes made to a VM after a backup was taken, you need to identify which changes will not be included in the restore and must be reapplied manually.
- Questions also test what must be done first when moving a VM's backup from one vault to a different vault — you need to know the required step in the original vault before the VM can be registered and protected by the new vault.
- Questions test which restore option to use and what prerequisite step is required when restoring to a point in time that falls outside the instant snapshot retention period — you need to know which restore configuration minimises downtime versus maximises flexibility, and what VM state is required before certain restore operations can proceed.
|
| Perform a failover to a secondary region by using Site Recovery |
- Questions test how Site Recovery maps a VM to its target network during a test failover — given a source VM connected to a specific subnet and a target VNet with multiple subnets, you need to identify which subnet the test VM will be connected to. You need to understand how Site Recovery resolves subnet name matching between source and target networks.
|
| Configure and interpret reports and alerts for backups |
- Questions test the configuration of diagnostic settings for backup reporting — given a Recovery Services vault and a set of storage accounts and Log Analytics workspaces in various regions, you need to identify which resources can be used as destinations for backup diagnostic logs. You need to know whether regional constraints apply to the destination resources.
|
Flash sale is here! Get Extra 25% off on ALL COURSES! Use coupon code FLASH25. Ends today.
This website uses cookies for proper functioning. Learn More