Microsoft
AZ-305 · Question #343
Hotspot Question You have five Azure subscriptions. Each subscription is linked to a separate Azure AD tenant and contains virtual machines that run Windows Server 2022. You plan to collect Windows se
Sign in or unlock AZ-305 to reveal the answer and full explanation for question #343. The question stem and answer options stay visible for context.
Submitted by thandi_sa· Mar 6, 2026Design identity, governance, and monitoring solutions
Question
Hotspot Question You have five Azure subscriptions. Each subscription is linked to a separate Azure AD tenant and contains virtual machines that run Windows Server 2022. You plan to collect Windows security events from the virtual machines and send them to a single Log Analytics workspace. You need to recommend a solution that meets the following requirements: - Collects event logs from multiple subscriptions - Supports the use of data collection rules (DCRs) to define which events to collect What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:
Exhibit
Answer Area
- To collect the event logs:Azure Event GridAzure LighthouseAzure Purview
- To support the DCRs:The Log Analytics agentThe Azure Monitor agentThe Azure Connected Machine agent
Unlock AZ-305 to see the answer
You've previewed enough free AZ-305 questions. Unlock AZ-305 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Log Analytics#Azure Monitor Agent#Data Collection Rules#Azure Lighthouse