An application depends on a regional Azure service. Operations wants an automatic notification if Microsoft posts an incident that affects only the region where the app runs, even when the individual VMs remain healthy. Which two Azure Monitor capabilities should be configured? Select two.

Metric alert rule

Metric alerts watch resource performance data, not Microsoft service incident announcements.

Log Analytics query

A query can analyze data already collected, but it does not by itself raise service alerts.

Resource lock

Resource locks prevent change operations, but they do not monitor Azure service incidents.

What does this AZ-104 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Service health alert — Service health alerts are the right fit because the business wants to know when Microsoft reports a regional incident or planned event that may affect service availability. An action group is required to send that information to people or automation. This combination is different from a metric alert, which watches the workload itself, or a log query, which only analyzes stored telemetry. The scenario is about Azure platform status, not VM performance or guest-level logs. Why others are wrong: Metric alerts watch resource measurements like CPU or disk latency, not Azure-wide service incidents. Log Analytics queries are useful once data has been collected, but they do not create native service incident notifications. Resource locks are administrative controls for change prevention, not monitoring controls, so they have no role in outage notification.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.