AZ-900 Describe Azure management and governance Practice Question
Which Azure service provides centralized log collection, querying, and analysis from multiple Azure resources and services?
⚠ Common exam trap
Many candidates confuse Azure Log Analytics with Azure Application Insights, mistakenly thinking Application Insights can aggregate logs from all Azure resources when it is actually scoped to application-level telemetry, not infrastructure or platform logs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Log Analytics
Azure Log Analytics is the correct answer because it is the primary Azure service designed for centralized log collection, querying, and analysis across multiple Azure resources and services. It uses a powerful query language (Kusto Query Language, KQL) to aggregate and analyze data from various sources, including Azure Monitor, virtual machines, and custom logs, providing a unified workspace for troubleshooting and monitoring.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Application Insights
Why it's wrong here
Application Insights is an application performance management (APM) service that drills into a live web application's request rates, response times, dependency failures, and user page views. While it can forward its telemetry to a Log Analytics workspace, its purpose is not to collect and consolidate logs from multiple Azure infrastructure resources. It is therefore scoped to application-level insight rather than the broad, cross-service log analysis that the question describes.
- ✓
Azure Log Analytics
Why this is correct
Azure Log Analytics is the core data-collection and querying service in Azure Monitor, ingesting logs and metrics from many Azure resources through diagnostic settings and agents. It stores everything in a central Log Analytics workspace and uses Kusto Query Language (KQL) to perform complex searches, join data sets, and surface trends across sources. This centralized, multi-source capability is exactly what makes it the correct choice for analyzing custom log data.
- ✗
Azure Service Health
Why it's wrong here
Service Health is a notification and reporting surface that tracks the real-time condition of Microsoft's Azure platform itself, including active incidents, planned maintenance events, and service advisories. It does not consume custom resource logs or telemetry from your own subscriptions because it is not a data-ingestion pipeline. As a result, it cannot provide the kind of organization-specific log analysis that the question is asking for.
- ✗
Azure Network Watcher
Why it's wrong here
Network Watcher is a regional diagnostic and monitoring tool for network infrastructure, offering packet captures, connection monitors, NSG flow logs, and VPN diagnostics. Its telemetry is frequently sent to a Log Analytics workspace for persistence, but Network Watcher itself is not a general-purpose log warehouse. Its focus on network-level troubleshooting means it cannot aggregate application and platform logs from all resource types, which is the core function being tested.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Log Analytics
Log Analytics is a cloud-based service that collects, analyzes, and visualizes machine-generated log data from various sources to help IT teams monitor systems and troubleshoot issues.
Key term
Query
A query is a request for information from a database, asking a specific question to retrieve, update, or manipulate data.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.