mediummultiple choiceObjective-mapped

Exhibit

Alert rule summary
------------------
Scope: vm-prod-01
Condition: Percentage CPU > 85
Evaluation frequency: 1 minute
Window size: 10 minutes
Severity: 2
Action groups: None
Notifications: Not configured
Status: Enabled

Metric sample
-------------
12:00 CPU 72%
12:01 CPU 88%
12:02 CPU 91%
12:03 CPU 89%
12:04 CPU 87%
12:05 CPU 90%
12:06 CPU 86%
12:07 CPU 92%
12:08 CPU 94%
12:09 CPU 88%

Based on the exhibit, a production VM must send an email and SMS notification if average CPU stays above 85% for 10 minutes. The team created the alert rule, but no one receives notifications when the condition is met. What should the administrator add to the alert rule?

Question 1mediummultiple choice
Full question →

Based on the exhibit, a production VM must send an email and SMS notification if average CPU stays above 85% for 10 minutes. The team created the alert rule, but no one receives notifications when the condition is met. What should the administrator add to the alert rule?

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

A

Distractor review

Add a diagnostic setting that sends VM metrics to a Log Analytics workspace.

Diagnostic settings export data for analysis, but they do not by themselves send alert notifications to people or systems.

B

Best answer

Attach an action group that includes email and SMS receivers.

Azure Monitor alert rules need an action group to trigger notifications or automation when the metric condition is met. The alert already evaluates correctly, but it has no notification target. Adding an action group with email and SMS receivers enables the response the business wants.

C

Distractor review

Change the alert to use a log query instead of a metric condition.

A log alert could work, but the metric alert already matches the CPU threshold requirement. The missing piece is notification delivery, not the alert type.

D

Distractor review

Create a resource lock to prevent changes to the virtual machine.

A lock protects against modification or deletion, but it does not generate alerts or notify operators about high CPU usage.

Common exam trap

Common exam trap: answer the scenario, not the keyword

Many certification questions include familiar terms but test a specific constraint. Read the exact wording before choosing an answer that is generally true but wrong for this case.

Technical deep dive

How to think about this question

This question should be treated as a scenario, not a definition check. Identify the problem, the constraint and the best action. Then compare each option against those facts.

KKey Concepts to Remember

  • Read the scenario before looking for a memorised answer.
  • Find the constraint that changes the correct option.
  • Eliminate answers that are true in general but not in this case.
  • Use explanations to understand the rule behind the answer.

TExam Day Tips

  • Underline the problem statement mentally.
  • Watch for words such as best, first, most likely and least administrative effort.
  • Review why wrong options are wrong, not only why the correct option is correct.

Related practice questions

Related AZ-104 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

What does this AZ-104 question test?

Read the scenario before looking for a memorised answer.

What is the correct answer to this question?

The correct answer is: Attach an action group that includes email and SMS receivers. — The alert rule is already configured to evaluate the correct metric, threshold, and time window. The exhibit shows that no action group is associated with the rule, so Azure Monitor has nowhere to send the notification. In Azure, alert conditions detect the issue, while action groups define what happens next, such as sending email, SMS, or running automation. Attaching an action group is the required remediation. Why others are wrong: Diagnostic settings export telemetry for later analysis, but they do not replace alert notification routing. Switching to a log query is unnecessary because the metric alert already meets the requirement. A resource lock helps protect resources from deletion or updates, but it has no role in alerting or notification delivery.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.

Discussion

Loading comments…

Sign in to join the discussion.