AZ-802 Practice Question: Monitor and Troubleshoot Windows Server Environments
You need to monitor the health of a Windows Server using System Monitor. You want to trigger an alert when the free space on the C: drive drops below 10%. You have already created a Data Collector Set. What do you need to add to the set to achieve this functionality?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add a Performance Counter Alert to the Data Collector Set.
To trigger alerts based on specific thresholds, you must create a Performance Counter Alert in the Data Collector Set. This allows you to select the specific counter, such as '% Free Space', and set a trigger condition. Once configured, you can define an action, such as executing a script or logging an event, when the threshold is breached, enabling proactive server maintenance before disk space issues cause system instability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add a System Configuration information collector to the set.
Why it's wrong here
System Configuration collectors are designed to track changes to registry keys or system settings, not to monitor real-time resource utilization like disk space. This collector type would not provide the threshold-based alerting functionality required to monitor drive capacity or trigger alerts based on free space percentages.
- ✓
Add a Performance Counter Alert to the Data Collector Set.
Why this is correct
A Performance Counter Alert is the specific component in Performance Monitor used to monitor a counter against a defined threshold. By adding this, you can specify the '% Free Space' counter for the 'LogicalDisk' object and define the alert to trigger when the value falls below 10%.
- ✗
Add a Trace collector to the current Data Collector Set.
Why it's wrong here
Trace collectors are used to capture kernel or application-level events, typically for deep performance profiling or debugging. They are not intended for monitoring static system resources like disk capacity or for triggering alerts based on threshold values, as they generate high-volume logs rather than status notifications.
- ✗
Modify the Security Log audit policy for the drive.
Why it's wrong here
Audit policies in the Security log track access events and user activity on the file system. They have no capability to monitor physical drive capacity or trigger alerts when available space crosses a specific percentage threshold, making them unsuitable for proactive disk space management and alert generation.
About these practice questions
Courseiva writes every AZ-802 question from scratch — 116 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.