Home › Azure AZ-305 › cloudcomputing › az305identitygov › Which Azure service should an architect recommen…
Which Azure service should an architect recommend to centralise routing of diagnostic logs from multiple Azure subscriptions into a single Log Analytics workspace + event hub for SIEM forwarding?
AAzure DNS
BPer-resource manual exports to OneDrive each Friday
CAzure Diagnostic Settings with destination = a centrally-shared Log Analytics workspace and an Event Hub
DAzure Cache for Redis
Answer & Solution
Correct answer: C. Azure Diagnostic Settings with destination = a centrally-shared Log Analytics workspace and an Event Hub
Diagnostic Settings is the centralised log-routing primitive (per AZ-305 §1 routing logs). The other options don't centralise logs.
Related questions
Which Azure governance service should an architect recommend to track and report regulatorWhich Microsoft Entra feature should an architect recommend so external partners (e.g. conWhich Azure feature should an architect recommend so that the same Microsoft Entra workforWhich Microsoft Entra ID feature should an architect recommend for adaptive risk-based autWhich Azure feature should an architect recommend to give an Azure VM or App Service an idWhich Azure governance hierarchy should an architect recommend so that a single Azure PoliWhich Azure governance feature should an architect recommend to enforce constraints acrossWhich Azure service should an architect recommend to centrally store and rotate secrets, c