Several Azure Monitor alerts across different subscriptions must notify the same on-call group by email, SMS, and webhook whenever they fire. The operations team wants to define the notification target once and reuse it from future metric alerts, log alerts, and activity log alerts. What should be created?

A metric alert with the same threshold applied to every resource that needs notification.

A metric alert detects conditions, but it is not a reusable notification container across many alert types.

A diagnostic setting on each resource so the contact list is stored with the logs.

Diagnostic settings export telemetry, but they do not store or manage notification recipients.

A Log Analytics workbook used as the shared notification destination.

Workbooks are for visualization and analysis, not for sending alert notifications to recipients.

What does this AZ-104 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: An action group that can be attached to multiple Azure Monitor alert rules. — Action groups are the Azure Monitor component used to centralize notification behavior. Once created, they can be referenced by multiple alert rules of different types, including metric, log, and activity log alerts. That lets the team define email, SMS, and webhook actions one time and reuse them everywhere, which is exactly what the scenario requires. The actual alert logic still lives in each rule, while the action group handles delivery. Why others are wrong: A metric alert is a detection rule, not a reusable delivery object. Diagnostic settings are for exporting logs and metrics, not managing recipients. Workbooks are reporting and analysis tools, so they cannot act as a notification target for alert rules.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.