You are troubleshooting a security issue for an Azure Storage account. You enable the diagnostic logs for the storage account. What should you use to retrieve the diagnostics logs?

Question

Options

• AAzure Security Center
• BAzure Monitor
• Cthe Security admin center
• DAzure Storage Explorer

• B
  93% (38)
• C
  2% (1)
• D
  5% (2)

Explanation

Azure Monitor for Diagnostic Logs

Azure Monitor is the centralized platform in Azure for collecting, analyzing, and acting on telemetry data, including diagnostic logs from Azure Storage accounts. When you enable diagnostic settings on a Storage account, the logs are routed to destinations such as a Log Analytics workspace, Event Hub, or Storage account - all of which are accessed and queried through Azure Monitor (using tools like Log Analytics and KQL queries).

Why the distractors are wrong:

• Azure Security Center (A) focuses on security posture management and threat protection recommendations, not log retrieval
• Security admin center (C) is related to Microsoft 365/Defender security administration, not Azure resource diagnostics
• Azure Storage Explorer (D) is a GUI tool for browsing and managing Storage account data (blobs, queues, tables), not for viewing diagnostic logs

Memory Tip: Think of Azure Monitor as the "one dashboard to monitor them all" - any time an Azure exam question asks about retrieving, querying, or analyzing diagnostic/activity logs for Azure resources, Azure Monitor is almost always the answer. The keyword "diagnostics logs" should immediately trigger "Azure Monitor."

No community discussion yet for this question.