nerdexam
Microsoft

AZ-500 · Question #201

You have an Azure Active Directory (Azure AD) tenant named contoso.com. You need to configure diagnostic settings for contoso.com. The solution must meet the following requirements: - Retain logs…

The correct answer is B. an Azure Log Analytics workspace. To retain Azure AD diagnostic logs for two years and enable Kusto query language for analysis, an Azure Log Analytics workspace is the most suitable storage destination.

Submitted by asante_acc· Mar 6, 2026Implement an instrumentation strategy

Question

You have an Azure Active Directory (Azure AD) tenant named contoso.com. You need to configure diagnostic settings for contoso.com. The solution must meet the following requirements: - Retain logs for two years. - Query logs by using the Kusto query language. - Minimize administrative effort. Where should you store the logs?

Options

  • Aan Azure event hub
  • Ban Azure Log Analytics workspace
  • Can Azure Storage account

How the community answered

(40 responses)
  • A
    5% (2)
  • B
    85% (34)
  • C
    10% (4)

Why each option

To retain Azure AD diagnostic logs for two years and enable Kusto query language for analysis, an Azure Log Analytics workspace is the most suitable storage destination.

Aan Azure event hub

An Azure event hub is primarily for streaming data in real-time to other services and does not provide built-in long-term storage or Kusto query capabilities.

Ban Azure Log Analytics workspaceCorrect

An Azure Log Analytics workspace is specifically designed for collecting, storing, and analyzing logs from various Azure services, including Azure AD, offering robust Kusto Query Language (KQL) capabilities. It supports long-term data retention, easily exceeding the two-year requirement, and centralizes log management, minimizing administrative overhead.

Can Azure Storage account

An Azure Storage account can retain logs for long periods, but it does not natively support querying data using Kusto Query Language (KQL) without integrating with additional services.

Concept tested: Azure AD diagnostic settings destinations

Source: https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-configure-diagnostics-storage

Topics

#diagnostic settings#Log Analytics#Azure AD logs#log retention

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice