Courseiva
← AZ-104
Full test
Monitor and Maintain Azure Resources →mediumMatchingObjective-mapped

AZ-104 Monitor and Maintain Azure Resources Practice Question

A production team wants to match common Azure Monitor components to the action each one performs. Match each item on the left to the best description on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Triggers when a numeric metric such as CPU percentage crosses a defined threshold.

Sends notifications or starts responses such as email, SMS, webhook, or automation.

Reports an Azure platform incident, advisory, or planned maintenance that affects a region or subscription.

Shows whether one specific Azure resource is currently healthy, degraded, or unavailable.

Exports a resource's logs and metrics to destinations such as Log Analytics or Storage.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Log Analytics workspace: Stores log data from various sources for central querying and analysis.

Log Analytics workspace stores logs centrally; Azure Monitor Metrics handles numeric time-series data; Application Insights focuses on application performance; Activity Log tracks control plane events; Alerts send notifications; Workbooks create interactive reports.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Log Analytics workspace: Stores log data from various sources for central querying and analysis.

    Why this is correct

    The Log Analytics workspace is a central repository that ingests log and performance data from Azure resources, virtual machines, containers, and custom sources. It supports KQL (Kusto Query Language) queries across all stored tables, making it the primary destination for logs before they are acted on or visualized. Because it structures data into tables with retention policies, it is ideal for deep troubleshooting, auditing, and cross-resource analytics, not just raw storage.

  • ✓

    Azure Monitor Metrics: Collects and stores numeric time-series data for performance monitoring.

    Why this is correct

    Azure Monitor Metrics is a time-series database that stores numeric measurements sampled over time, such as CPU percentage, disk I/O, or HTTP response times. It is optimized for near real-time ingestion and low-latency alerting, with a default retention of 93 days (or longer if archived). Metrics require less storage and cost less than logs, but they cannot answer detailed query questions like 'what was the exception stack trace?'

  • ✓

    Application Insights: Monitors application performance, usage, and availability.

    Why this is correct

    Application Insights is an Application Performance Management (APM) service that monitors live applications, capturing telemetry such as requests, dependencies, exceptions, and user/page views. It automatically correlates related telemetry via distributed tracing and supports availability tests that proactively probe endpoints from multiple locations. While it can send data to a Log Analytics workspace for deeper KQL queries, its core purpose is to give developers an end-to-end view of application behavior.

  • ✗

    Activity Log: Sends notifications or triggers automated actions when conditions are met.

    Why it's wrong here

    The Activity Log is a subscription-level record of control plane events — every write operation (PUT, POST, DELETE) performed against Azure Resource Manager, such as creating a VM or modifying a network security group. It captures who made the change, what changed, when it happened, and the deployment status, which is essential for auditing and governance. The Activity Log itself does not send notifications or run actions; you must configure a diagnostic setting to stream it elsewhere or attach an alert rule for that capability, so the described behavior actually defines Alerts.

  • ✗

    Alerts: Tracks control plane events for subscription-level auditing.

    Why it's wrong here

    Alerts are Azure Monitor's rule engine for detecting when a monitored condition (metric threshold, log search result, or activity log event) is met, then proactively notifying or triggering an automated action such as an email, webhook, or autoscale. They are not a data store and do not track or audit control plane events; rather, they consume signals from sources like metrics, logs, or the Activity Log to evaluate state transitions. The description provided — 'tracks control plane events for subscription-level auditing' — correctly describes the Activity Log, not Alerts.

  • ✗

    Workbooks: Analyzes application usage and performance with detailed telemetry.

    Why it's wrong here

    Workbooks are Azure Monitor's interactive reporting canvas that lets users combine text, parameters, and queries over logs, metrics, and data from other services into rich, customizable dashboards. They do not collect or analyze application usage telemetry themselves; instead, they visualize data already gathered by the underlying data sources. The description 'analyzes application usage and performance with detailed telemetry' refers to Application Insights, whereas workbooks are purely for presentation, collaboration, and interactive drill-down analysis.

About these practice questions

One of 1,049 original AZ-104 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

1 more way this is tested on AZ-104

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. An operations lead must choose the right Azure Monitor target for each requirement. Match each requirement to the Azure component that best satisfies it.

hard
  • ✓ A.Metrics Explorer: Shows real-time metrics
  • ✓ B.Action Groups: Define notification actions
  • C.Log Analytics Workspace: Provides visualizations
  • ✓ D.Alert Rules: Define conditions
  • E.Workbooks: Stores and queries logs

Why A: Metrics Explorer shows real-time metrics; Action Groups define notification actions; Log Analytics Workspace stores and queries logs; Alert Rules define conditions; Workbooks provide visualizations.

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.