AI-200 Security And Observability Practice Question
You need to export Azure Monitor metric and log data to an external SIEM solution for security auditing. Which Azure feature should you use to stream this telemetry in real-time to an external Event Hub?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Diagnostic settings configured to stream to an Azure Event Hub
Diagnostic settings in Azure Monitor support streaming platform logs and metrics directly to Azure Event Hubs, which can then forward data to external SIEM tools like Splunk or QRadar.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Backup vault scheduled jobs
Why it's wrong here
Incorrect. Backup vault protects virtual machine and database disks, not telemetry log streams.
- ✗
Azure Advisor recommendations export
Why it's wrong here
Incorrect. Advisor exports recommendations, not operational logs.
- ✓
Diagnostic settings configured to stream to an Azure Event Hub
Why this is correct
Correct. Diagnostic settings allow real-time streaming of logs and metrics to Event Hubs for SIEM integration.
- ✗
Azure Resource Graph queries
Why it's wrong here
Incorrect. Resource Graph queries metadata on demand, it does not stream diagnostic logs.
About these practice questions
This AI-200 question is part of Courseiva's 507-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.