Drag and Drop Matching Questions

Evaluates a numeric Azure Monitor metric and fires when a threshold or dynamic condition is met.

Runs a KQL query against workspace data and fires when the query result matches the condition.

Delivers notifications or automation such as email, SMS, webhook, or runbook execution.

Exports resource logs and metrics to a destination such as Log Analytics, storage, or Event Hub.

Monitors subscription-level control-plane events such as deletes, writes, or policy actions.

Central repository for collected telemetry that you query and analyze over a retention period.

The query language used to filter, summarize, and correlate log records in Azure Monitor.

Subscription-scoped record of Azure control-plane operations such as create, update, and delete.

Alert that evaluates the result of a KQL query on a schedule and fires when conditions are met.

Configuration that sends resource logs and metrics to a workspace, storage account, or Event Hub.

Metric alert rule

Action group

Diagnostic setting

Activity log alert

Log Analytics workspace

Keeps only rows that meet the filter condition.

Returns only selected columns and can rename them.

Aggregates rows into totals, counts, or grouped results.

Orders the output by one or more columns.

Defines when the backup job starts, such as daily at a specific time.

Defines how long recovery points remain available for restore.

Determines how the scheduled backup time is interpreted in the policy.

Keeps snapshot copies available for fast local restores before the vault copy completes.

Reusable object that combines schedule, retention, and related backup settings.

Filters rows so only records that meet the condition remain in the result.

Returns only selected columns and can rename them for cleaner output.

Aggregates data, such as counting failures by hour or by status code.

Adds a calculated column based on existing fields in each row.

Sorts the result set, such as showing the newest records first.

az vm deallocate

az vm redeploy

az vm resize

az snapshot create

az vm disk attach

Transition to Cool

Transition to Archive

Rehydrate from Archive

Delete blob

Storage firewall with a virtual network rule and service endpoint

Private endpoint with private DNS zone

Trusted Microsoft services exception

Storage firewall IP network rule

Add a more specific /32 UDR for that public IP with next hop Internet.

The system route for the peered VNet prefix is more specific than the /8 UDR, so it wins unless a longer UDR is added.

The /24 route wins because Azure chooses the longest matching prefix.

Only resources in Subnet-A are affected; other subnets keep their own system or custom routes.

The /32 host route takes precedence over the broader prefix.

Stores three copies of data within one Azure datacenter.

Stores copies across multiple availability zones in one region.

Replicates data to a secondary region, but the secondary copy is not readable.

Replicates data to a secondary region and allows read access to that secondary copy.

Combines zone redundancy in the primary region with geo-replication to a secondary region.

Combines zone redundancy and geo-replication, with readable access to the secondary region.

Azure File Sync

SMB with AD DS-based identity authentication

NFS 4.1 share

SAS token

User delegation SAS

Service SAS

Account SAS

Storage account key

The address spaces overlap, so one range must be changed before peering can be created.

Create VNet peering; it provides private connectivity without a VPN gateway.

Enable gateway transit on the hub peering and use remote gateways on the spoke peering.

VNet peering is not transitive, so A must be connected to C directly or routed through an appliance.

Create a new non-overlapping address space and migrate workloads before removing the old range.

Evaluates resource performance data such as CPU, latency, or disk metrics.

Watches subscription-level control-plane events such as deletes or policy changes.

Runs a KQL query against workspace data and alerts on the result.

Exports resource telemetry off the resource for storage or analysis.

Serves as the reusable response target for notifications and automation.

Spreads VMs across fault and update domains within one datacenter.

Places VMs in separate datacenters within the same Azure region.

Reusable source for creating the same VM build again.

Defines CPU, memory, and temporary storage resources.

Best for data accessed frequently and kept immediately available.

Best for infrequently accessed data that still remains online.

Stores data offline and requires rehydration before it can be read.

Moves archived data back to an online tier so it can be accessed again.

Helps prevent modification or deletion for a retention period.

The priority 200 deny is evaluated first and blocks the flow.

The destination NIC must be added to ASG-Api for the rule to match.

The service tag does not represent the workstation's IP; a rule for the real source or a VPN path is needed.

NSGs are stateful, so the return traffic is allowed automatically.

The lower-number deny rule wins because NSGs stop at the first matching rule.

General-purpose v2

FileStorage

BlockBlobStorage

BlobStorage

Triggers when a numeric metric such as CPU percentage crosses a defined threshold.

Sends notifications or starts responses such as email, SMS, webhook, or automation.

Reports an Azure platform incident, advisory, or planned maintenance that affects a region or subscription.

Shows whether one specific Azure resource is currently healthy, degraded, or unavailable.

Exports a resource's logs and metrics to destinations such as Log Analytics or Storage.