nerdexam
Microsoft

AZ-305 · Question #375

You have an Azure subscription that contains 1,000 virtual machines and a Log Analytics workspace named Workspace1. You plan to collect custom JSON logs from the virtual machines and store the logs…

The correct answer is A. an Azure Monitor Private Link Scope (AMPLS). Instead of creating a private link for each resource the virtual network connects to, Azure Monitor uses a single private link connection using a private endpoint from the virtual network to an Azure Monitor Private Link Scope (AMPLS). The AMPLS is a set of Azure Monitor…

Submitted by carter_n· Mar 6, 2026Design identity, governance, and monitoring solutions

Question

You have an Azure subscription that contains 1,000 virtual machines and a Log Analytics workspace named Workspace1. You plan to collect custom JSON logs from the virtual machines and store the logs in a custom table in Workspace1. You need to ensure that the logs are collected by using the Logs Ingestion API. The solution must prevent access to Workspace1 from the internet. What should you include in the solution?

Exhibit

AZ-305 question #375 exhibit

Options

  • Aan Azure Monitor Private Link Scope (AMPLS)
  • Bthe linked storage account of Workspace1
  • CService Connector
  • Dan Azure Peering Service connection

How the community answered

(22 responses)
  • A
    73% (16)
  • B
    9% (2)
  • C
    14% (3)
  • D
    5% (1)

Explanation

Instead of creating a private link for each resource the virtual network connects to, Azure Monitor uses a single private link connection using a private endpoint from the virtual network to an Azure Monitor Private Link Scope (AMPLS). The AMPLS is a set of Azure Monitor resources that define the boundaries of your monitoring network. Resource-specific endpoints Log Analytics endpoints are workspace specific, except for the query endpoint. As a result, adding a specific Log Analytics workspace to the AMPLS will send ingestion requests to this workspace over the private link. Ingestion to other workspaces will continue to use the public https://learn.microsoft.com/en-us/azure/azure-monitor/logs/private-link-security

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice