This is the fifteenth blog in the Microsoft Azure Fundamentals Certification Series(AZ-900) of Topic 3: Azure Cloud Security.
You can go through my previous topic 3.4 Microsoft Azure Governance to know more about Azure Blueprints and Azure Policy.
All the blogs in this series can be accessed via this list.
This blog covers the topic 3.5 Azure Cloud Security: Monitoring and Reporting which includes Azure Cloud Monitor & Azure Cloud Service Health.
Monitoring is one of the key aspects of any IT environment, and proper reporting of events can lead to an on-time response to any problems that may arise.
Azure Cloud Monitoring
- Azure cloud monitor is an extensive solution for the collection, analysis, and action on the telemetry data it collects from the enterprises’ cloud and on-premises environment.
- It also enables us to figure out how well the applications are performing and identifies issues affecting them and the resources they are dependent on.
- Listed below are some of the key points about the service:
- The Azure Monitor has insights from all the Azure cloud solutions which lead to a very handy collection of user activity logs, diagnostic logs, storage logs and compute logs. Hence making sure no activity or error goes unnoticed.
- A cloud environment by nature is highly distributed, meaning that at any single moment there can be multiple sources generating telemetry data. The Azure Monitor’s ability to aggregate and process that data allows the user to create alerts for issues with potential business impacts in the Azure environment.
Azure Cloud Service Health
- The Azure Cloud provides a suite of services that keep you informed about the health of all your cloud resources in the form of Azure Service Health.
- The information that is provided includes things such as service impacting events, planned maintenance, and various other changes that may affect the availability of your cloud resources.
- The Azure Service Health is a combined suite of three smaller services listed below:
- Azure service health: the main module that provides you with personalized information on the services and regions being used by you.
- Azure Status: provides information on service outages, in case of a service outage from Azure’s side this can help an enterprise to quickly migrate its resources temporarily to non-impacted regions or plan its cloud deployments keeping previous service outages in mind.
- Azure resource health: provides information regarding the health of your individual resources such as a specific virtual machine instance.
AZ 900 Exam Questions
Here is a sample question from the Microsoft Azure Fundamentals Certification Exam[AZ-900] that you should be able to solve after reading this blog.
Q1. Which of the following statements are true?
- From Azure Service Health, an administrator can view the health of all the services deployed to an Azure environment and all the other services available in Azure.
- From Azure Service Health, an administrator can create a rule to be alerted if an Azure service fails.
- From Azure Service Health, an administrator can prevent a service failure from affecting a specific virtual machine.
Correct Answer: A and B
Explanation: The Azure Service Health only provides fault monitoring, any preventative actions to be taken are performed from their respective dashboards.
Q2. You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region. Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?
- Azure Service Fabric
- Azure Monitor
- Azure virtual machines
- Azure Advisor
Correct Answer: B
- [AZ-900] Microsoft Azure Certification Fundamental Exam: Everything You Must Know
- Learn how to create a Free Microsoft Azure Trial Account
- [AZ-900] Microsoft Azure Fundamentals: Topic 1.1 Overview & Benefits
- Topic 2.1 Azure Architecture: Region, Availability Zone & Geography
- How to Register For [AZ-900] Microsoft Azure Fundamentals Certification Exam
- Topic 3.1 Microsoft Azure Secure Network Connectivity: Firewall, DDOS, & NSG
- Topic 3.2 Microsoft Azure Core Identity Services: AD & MFA
- Topic 3.3 Microsoft Azure Security Services: Security Center, Key Vault, AIP & ATP
- Topic 3.4 Microsoft Azure Governance: Azure Blueprints & Azure Policy