SIMULATION You need to ensure that the events in the NetworkSecurityGroupRuleCounter log of the VNET01- Subnet0-NSG network security group (NSG) are stored in the logs11597200 Azure Storage account…

Submitted by ricky.ec· Mar 6, 2026Monitor and maintain Azure resources - specifically configuring diagnostic logging and archiving for Network Security Groups to meet compliance and retention requirements (AZ-104: Monitor and back up Azure resources)

Question

SIMULATION You need to ensure that the events in the NetworkSecurityGroupRuleCounter log of the VNET01- Subnet0-NSG network security group (NSG) are stored in the logs11597200 Azure Storage account for 30 days. To complete this task, sign in to the Azure portal. Answer: You need to configure the diagnostic logging for the NetworkSecurityGroupRuleCounter log. 1. In the Azure portal, type Network Security Groups in the search box, select Network Security Groups from the search results then select VNET01-Subnet0-NSG. Alternatively, browse to Network Security Groups in the left navigation pane. 2. In the properties of the Network Security Group, click on Diagnostic Settings. 3. Click on the Add diagnostic setting link. 4. Provide a name in the Diagnostic settings name field. It doesn't matter what name you provide for the exam. 5. In the Log section, select NetworkSecurityGroupRuleCounter. 6. In the Destination details section, select Archive to a storage account. 7. In the Storage account field, select the logs11597200 storage account. 8. In the Retention (days) field, enter 30. 9. Click the Save button to save the changes.

Explanation

The correct approach requires navigating to the VNET01-Subnet0-NSG Network Security Group, accessing Diagnostic Settings, and creating a new diagnostic setting that specifically selects the 'NetworkSecurityGroupRuleCounter' log category while configuring 'Archive to a storage account' as the destination pointing to 'logs11597200' with a retention period of 30 days. This ensures only the required log type is captured and stored in the correct storage account with the mandated retention policy. Azure Diagnostic Settings is the native mechanism for routing NSG flow and rule counter logs to long-term storage destinations such as Azure Storage accounts.

Topics

#Azure Network Security Groups#Diagnostic Settings#Azure Monitor Logs#Azure Storage Retention

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice