AZ-400 Question #239: Real Exam Question with Answer & Explanation

Sign in or unlock AZ-400 to reveal the answer and full explanation for question #239. The question stem and answer options stay visible for context.

Submitted by andres_qro· Mar 6, 2026Monitor and maintain Azure resources - specifically writing KQL queries in Azure Monitor Log Analytics to analyze virtual machine event data (Maps to AZ-104 or AZ-140 Monitor and Backup domain)

Question

Drag and Drop Question You have several Azure virtual machines that run Windows Server 2019. You need to identify the distinct event IDs of each virtual machine as shown in the following table. How should you complete the Azure Monitor query? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Unlock AZ-400 to see the answer

You've previewed enough free AZ-400 questions. Unlock AZ-400 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Unlock AZ-400 - $49.99 / 30 days Sign in

Topics

#Azure Monitor#Kusto Query Language (KQL)#Log Analytics#Windows Event Logs

Full AZ-400 Practice Browse All AZ-400 Questions