Hotspot Question You have an Azure subscription that contains the resources shown in the following table. VNet1, VNet2, and VNet3 each has multiple virtual machines connected. The virtual machines…

Submitted by kevin_r· Mar 6, 2026Design and Recommend Network Security Solutions / Monitor and Optimize Azure Infrastructure - typically aligned with AZ-305 (Azure Solutions Architect) or AZ-700 (Azure Network Engineer) domain covering private connectivity and monitoring architecture.

Question

Hotspot Question You have an Azure subscription that contains the resources shown in the following table. VNet1, VNet2, and VNet3 each has multiple virtual machines connected. The virtual machines use the Azure DNS service for name resolution. You need to recommend an Azure Monitor log routing solution that meets the following requirements: - Ensures that the logs collected from the virtual machines and sent to Workspace1 are routed over the Microsoft backbone network - Minimizes administrative effort What should you include in the recommendation? To answer, select the appropriate options in the answer area. Answer:

Exhibits

Explanation

Based on the scenario, the correct recommendation involves using Azure Monitor Private Link Scope (AMPLS) with a Private Endpoint connected to Workspace1. This ensures that log data from virtual machines traverses the Microsoft backbone network rather than the public internet, satisfying the security routing requirement. Since VNet1, VNet2, and VNet3 use Azure DNS, the private endpoint DNS records are automatically resolved, minimizing administrative effort by avoiding manual DNS configuration across multiple VNets - a single AMPLS with one private endpoint can cover all connected VNets sharing the same DNS infrastructure.

Topics

#Azure Monitor Private Link Scope#Private Endpoints#Log Analytics Workspace#Network Routing Security

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice