What is the primary use case for Azure Event Hubs in a logging and monitoring solution?

Visualizing metrics in dashboards

Ingesting and streaming large volumes of telemetry data

Storing logs for long-term archival

A company has a web app that is experiencing a high rate of exceptions. They have enabled Application Insights. They want to be alerted when the exception rate exceeds 10 per minute, and they want to see the stack trace for each exception. What should they do?

Create a log search alert on the 'exceptions' table that counts exceptions per minute, and use the 'details' column to view stack traces.

Use Application Insights' built-in 'Smart Detection' to automatically alert on exception rate changes.

Create a metric alert on the 'Exceptions' metric with a threshold of 10, and use the 'operation_Id' to find stack traces.

Enable Azure Diagnostics on the web app to collect exception logs, and create an alert on the AzureDiagnostics table.

A company has a new Azure subscription with a single Log Analytics workspace. The security team needs to query sign-in logs and audit logs from Microsoft Entra ID (Azure AD) in the workspace, and they want to be alerted when a specific user account is disabled. What should you configure first?

Create a scheduled query alert rule in the Log Analytics workspace that queries the SigninLogs table for the disabled user.

Create a new Log Analytics workspace in the same region as Microsoft Entra ID to ensure log ingestion.

Install the Microsoft Entra ID monitoring agent on each domain controller to forward security events to the workspace.

Enable diagnostic settings on the Microsoft Entra ID tenant to stream audit and sign-in logs to the Log Analytics workspace.

A company must retain application logs for seven years for compliance. They also need to stream the same logs in near real time to a third-party security information and event management (SIEM) system. They plan to use a Log Analytics workspace for operational queries. What is the most efficient way to route the logs?

Send logs only to Log Analytics and set the workspace retention to 2,555 days.

Send logs to an Azure storage account and then use Azure Data Factory to copy them to the SIEM and Log Analytics.

Use Azure Monitor Agent to collect logs and send them directly to the SIEM, bypassing Log Analytics.

Configure diagnostic settings to send logs to Log Analytics, an Azure storage account, and an Azure Event Hubs namespace.

What type of data is stored in Azure Monitor Metrics?

Numeric values collected at regular intervals

Azure Solutions Architect Expert

Domain 1Objective 1

Design Solutions for Logging and Monitoring AZ-305 Practice Questions (Page 4)

Part of the Design identity, governance, and monitoring solutions domain, which makes up ~30% of our current practice bank. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 5–8 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

11concepts

Questions 16–20

16foundation · easy
What is the primary use case for Azure Event Hubs in a logging and monitoring solution?
Select an answer first
17application · medium
A company has a web app that is experiencing a high rate of exceptions. They have enabled Application Insights. They want to be alerted when the exception rate exceeds 10 per minute, and they want to see the stack trace for each exception. What should they do?
Select an answer first
18application · medium
A company has a new Azure subscription with a single Log Analytics workspace. The security team needs to query sign-in logs and audit logs from Microsoft Entra ID (Azure AD) in the workspace, and they want to be alerted when a specific user account is disabled. What should you configure first?
Select an answer first
19application · medium
A company must retain application logs for seven years for compliance. They also need to stream the same logs in near real time to a third-party security information and event management (SIEM) system. They plan to use a Log Analytics workspace for operational queries. What is the most efficient way to route the logs?
Select an answer first
20foundation · easy
What type of data is stored in Azure Monitor Metrics?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-305

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-305” is a trademark of its owner, used for identification only.