Hotspot Question You have an Azure subscription that contains the resources shown in the following table. You create the Azure Storage accounts shown in the following table. You need to configure…

Question

Exhibits

Answer Area

• Analytics1Yes
• Analytics2Yes
• Analytics3No

Explanation

This question tests knowledge of Azure SQL auditing destination requirements, specifically which storage accounts and Log Analytics workspaces are compatible based on region and subscription constraints.

Approach. For Azure SQL auditing, a storage account must be in the same region as the SQL Server OR in any region if it is configured as geo-redundant. Storage accounts in different regions without geo-redundancy are NOT supported as audit destinations. For Log Analytics workspaces, there is no region restriction - any Log Analytics workspace within the same Azure subscription (or even cross-subscription with proper permissions) can be used as an audit log destination for Azure SQL. Therefore, when evaluating storage accounts, only those in the same region as SQL1 or those with geo-redundant replication (RA-GRS/GRS) qualify, while all Log Analytics workspaces in the subscription are valid destinations regardless of their region.

Concept tested. Azure SQL Server auditing destination requirements - storage account region/replication constraints vs. Log Analytics workspace flexibility for audit log destinations.

Reference. https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-overview

No community discussion yet for this question.