AZ-500 Question #121: Real Exam Question with Answer & Explanation

Question

You are troubleshooting a security issue for an Azure Storage account. You enable the diagnostic logs for the storage account. What should you use to retrieve the diagnostics logs?

Options

• AAzure Storage Explorer
• BSQL query editor in Azure
• CFile Explorer in Windows
• DAzure Security Center

Explanation

Explanation

Azure Storage Explorer is the correct tool because it is specifically designed to connect to and browse Azure Storage accounts, allowing you to navigate to the $logs container where diagnostic logs are automatically stored as blobs when diagnostics are enabled. It provides a graphical interface to download, view, and analyze these log files directly from Azure Blob Storage.

Why the distractors are wrong:

• B (SQL Query Editor): This tool is used for querying Azure SQL databases, not for accessing blob-based diagnostic logs in a storage account.
• C (File Explorer in Windows): This is a local file system tool and cannot natively connect to Azure Storage to retrieve cloud-based diagnostic logs.
• D (Azure Security Center): This service focuses on threat protection and security recommendations across Azure resources, but it is not used to retrieve or browse storage diagnostic logs directly.

💡 Memory Tip

Think "Storage = Storage Explorer" - whenever a question involves browsing, retrieving, or managing files and logs within an Azure Storage account, Azure Storage Explorer is almost always the right answer. It's the dedicated GUI tool built precisely for this purpose.

No community discussion yet for this question.