Courseiva

AZ-802 Practice Question: Monitor and Troubleshoot Windows Server Environments

An organization is migrating its on-premises Windows Server 2022 monitoring strategy to Azure Monitor. You need to collect specific event logs and performance counters from 500 servers using the most modern, secure, and centralized management method available. Which agent should you deploy to these servers to support Data Collection Rules (DCR)?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The Azure Monitor Agent (AMA)

Monitoring strategies have evolved from the legacy Log Analytics agent to the Azure Monitor Agent (AMA). AMA provides a more secure, cost-effective, and simplified way to collect data using Data Collection Rules (DCRs). This transition is critical for administrators to ensure long-term support and leverage granular control over data collection from both Azure and on-premises Windows Server instances.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The legacy Log Analytics agent

    Why it's wrong here

    The legacy Log Analytics agent is being deprecated and does not support Data Collection Rules. While it served as the primary method for years, it lacks the modern security features and centralized management provided by the new agent architecture, making it a poor choice for new deployments or long-term monitoring strategies.

  • The Azure Diagnostics extension (WAD)

    Why it's wrong here

    Azure Diagnostics extension is primarily designed for collecting telemetry from Azure resources like VMs during the boot process or for basic metrics. It does not provide the deep OS-level logging and cross-platform management capabilities required for a comprehensive Windows Server monitoring solution across a hybrid environment effectively.

  • The Azure Monitor Agent (AMA)

    Why this is correct

    The Azure Monitor Agent uses Data Collection Rules to filter and stream data to specific destinations. This agent is the current standard for Windows Server monitoring, offering improved performance, scoped configuration, and support for Azure Arc-enabled servers, which simplifies the management of hybrid server workloads across the entire enterprise environment.

  • The Dependency Agent

    Why it's wrong here

    Dependency Agent is specifically used for VM Insights to map processes and dependencies between servers. It is not a standalone monitoring agent for general event logs or performance counters; rather, it works alongside the primary monitoring agent to provide specialized visualization of network connections and system process maps.

About these practice questions

Courseiva writes every AZ-802 question from scratch — 116 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Microsoft exam blueprint

This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.