AZ-120 · Question #344
You have an SAP on Azure landscape. You configure SAP Central Services (SCS) to write logs to Windows Event Viewer. You need to collect the logs in Azure Monitor by using a Data Collection Rule…
The correct answer is D. a private link scope E. a data collection endpoint. Enable network isolation for Azure Monitor Agent by using Private Link By default, Azure Monitor Agent connects to a public endpoint to connect to your Azure Monitor environment. You can enable network isolation for your agents by using Azure Private Link. A data collection…
Question
You have an SAP on Azure landscape. You configure SAP Central Services (SCS) to write logs to Windows Event Viewer. You need to collect the logs in Azure Monitor by using a Data Collection Rule (DCR). The solution must prevent the logs from being sent via the internet. Which two resources should you configure? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- Aa Log Analytics agent
- Ba service endpoint
- Ca user-defined route
- Da private link scope
- Ea data collection endpoint
How the community answered
(28 responses)- A11% (3)
- B4% (1)
- C7% (2)
- D79% (22)
Explanation
Enable network isolation for Azure Monitor Agent by using Private Link By default, Azure Monitor Agent connects to a public endpoint to connect to your Azure Monitor environment. You can enable network isolation for your agents by using Azure Private Link. A data collection rule, which defines the data Azure Monitor Agent collects and the destination to which the agent sends data. 1. (D) Link your data collection endpoints to your Azure Monitor Private Link Scope Create a data collection endpoint for each of your regions for agents to connect to instead of using the public endpoint. An agent can only connect to a data collection endpoint in the same region. If you have agents in multiple regions, create a data collection endpoint in each one. 2. Configure your private link. You'll use the private link to connect your data collection endpoint to a set of Azure Monitor resources that define the boundaries of your monitoring network. This set is called an Azure Monitor Private Link Scope. 3. (E) Add the data collection endpoints to your Azure Monitor Private Link Scope resource. This process adds the data collection endpoints to your private DNS zone (see how to validate) and allows communication via private links. You can do this task from the AMPLS resource or on an existing data collection endpoint resource's Network isolation tab.
Topics
Community Discussion
No community discussion yet for this question.