Monitor and Backup

Question 1

Azure Backup

Answer 1

is the Azure-based service you can use to back up (or protect) and restore your data in the Microsoft cloud.

Question 2

Azure Backup Center

Answer 2

Backup Center provides a single unified management experience in Azure for enterprises to govern, monitor, operate, and analyze backups at scale. As such, it’s consistent with Azure’s native management experiences.

Question 3

The Recovery Services vault

Answer 3

is a storage entity in Azure that stores data.

Question 4

Microsoft Azure Recovery Services (MARS) agent

Answer 4

Back up files and folders on physical or virtual Windows OS (VMs can be on-premises or in Azure).
No separate backup server required.
Not application aware; file, folder, and volume-level restore only.
Back up and restore content.

Question 5

VM backup options: Snapshot

Answer 5

A managed disk snapshot is a read-only full copy of a managed disk that is stored as a standard managed disk by default.

These snapshots exist independent of the source disk and can be used to create new managed disks. They are billed based on the used size.

Question 6

VM back up options: Azure Backup

Answer 6

Azure Backup should be used for Azure VMs running production workloads.

Creates recovery point that are stored in geo-redundant recovery vaults.

Question 7

VM back up options: Azure Site Recovery

Answer 7

protects your VMs from a major disaster scenario when a whole region experiences an outage due to major natural disaster or widespread service interruption.

You can configure Azure Site Recovery for your VMs so that you can recover your application with a single click in matter of minutes.

You can replicate to an Azure region of your choice.

Question 8

VM back up options : Managed Custom Image

Answer 8

Managed disks also support creating a managed custom image.

It contains all managed disks associated with a VM, including both OS and Data disks.

Question 9

An Azure backup job consists of two phases.

Answer 9

First, a virtual machine snapshot is taken. Second, the virtual machine snapshot is transferred to the Azure Recovery Services vault.

Question 10

Soft Delete

Answer 10

Azure Storage now offers soft delete for blob objects so that you can more easily recover your data

Soft delete for VMs protects the backups of your VMs from unintended deletion. Even after the backups are deleted, they’re preserved in soft-delete state for 14 additional days.

Question 11

Azure Monitor Key Capabilities

Answer 11

Monitor and visualize metrics.

Query and analyze logs (activity logs, diagnostic logs)

Setup alerts and actions.

Question 12

The Azure Activity Log

Answer 12

is a subscription log that provides insight into subscription-level events that have occurred in Azure.

This includes a range of data, from Azure Resource Manager operational data to updates on Service Health events.

What operations were taken on the resources in your subscription?
Who started the operation?
When the operation occurred?
The status of the operation.
The values of other properties that might help you research the operation.

Question 13

An action group

Answer 13

is a collection of notification preferences defined by the owner of an Azure subscription.

Azure Monitor and Service Health alerts use action groups to notify users that an alert has been triggered.

Question 14

Log Analytics

Answer 14

is a service that helps you collect and analyze data generated by resources in your cloud and on-premises environments.

Question 15

Log Analytics Workspace

Answer 15

To use log analytics a workplace is needed.

provide a subscription, resource group, location and name.

Question 16

Log Analytics: Connected Sources

Answer 16

computers and resources that generate data collected by Log Analytics.

Question 17

Log Analytics: Data Sources

Answer 17

Data sources are the different data collected from each connected source.

Data sources can include events and performance data from Windows and Linux agents.

You must configure each data source that you want to collect from.

Question 18

Log Analytics Tables

Answer 18

Each data source and solution stores its data in dedicated tables in the Log Analytics workspace (i.e., Event, Syslog, Heartbeat, MyLog_CL, Alert, other)

Question 19

Log Analytics: Query

Answer 19

Query structure is as follows

Source Table
   | operator
   | operator
   ...
   | operator

e.g., this query returns a count of the top 10 errors in the Event log during the last day.

Event
| where (EventLevelName == "Error")
| where (TimeGenerated > ago(1days))
| summarize ErrorCount = count() by Computer
| top 10 by ErrorCount desc

Question 20

Network Watcher

Answer 20

provides tools to monitor, diagnose, view metrics, and enable or disable logs for resources in an Azure virtual network.

Network Watcher is a regional service that enables you to monitor and diagnose conditions at a network scenario level.

Question 21

IP Flow Verify

Answer 21

Checks if a packet is allowed or denied to or from a virtual machine. For example, confirming if a security rule is blocking ingress or egress traffic to or from a virtual machine.

Question 22

Network Watcher: Next Hop

Answer 22

Used to determine if traffic is being directed to the intended destination. Next hop information will help determine if network routing is correctly configured.

Question 23

Azure Monitor : Alert Rule Composition

Answer 23

Resource - the target resource
Condition - signal type (i.e., metric, log, activity log) and alert logic.
Actions -action and action group
Alert Details - alert name, alert description, severity of alert.

Question 24

Azure monitor: alert state

Answer 24

New - issue has been detected but not reviewed
Acknowledged - admin has reviewed the alert and is working on it
Closed - issue is resolved

Question 25

Azure Monitor VM Insights

Answer 25

is a feature of Azure Monitor that relies on Azure Monitor Logs. Think of Azure Monitor VM Insights as a feature that provides a predefined, curated monitoring experience, with little configuration required.