nerdexam
Microsoft

AZ-500 · Question #589

Hotspot Question You have an Azure subscription that uses Microsoft Defender for Cloud. Defender for Cloud has the security alerts shown in the following exhibit. Use the drop-down menus to select…

The correct answer is You can create additional Microsoft Entra diagnostic settings. = No; You can configure retention for locations where Setting4 stores logs. = Yes; You can configure Setting2 to have Analytics1 and Analytics2 as destinations. = No. Microsoft Entra diagnostic settings have a maximum limit (typically 1-2 settings depending on destination type), so if the exhibit shows the limit is already reached, no additional settings can be created. Log Analytics workspaces (which Setting4 likely represents as a…

Submitted by ravi_2018· Mar 6, 2026Manage security operations / Configure monitoring and logging in Azure, including Microsoft Entra diagnostic settings limitations and Log Analytics workspace data retention configuration

Question

Hotspot Question You have an Azure subscription that uses Microsoft Defender for Cloud. Defender for Cloud has the security alerts shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-500 question #589 exhibit 1
AZ-500 question #589 exhibit 2

Answer Area

  • You can create additional Microsoft Entra diagnostic settings.No
  • You can configure retention for locations where Setting4 stores logs.Yes
  • You can configure Setting2 to have Analytics1 and Analytics2 as destinations.No

Explanation

Microsoft Entra diagnostic settings have a maximum limit (typically 1-2 settings depending on destination type), so if the exhibit shows the limit is already reached, no additional settings can be created. Log Analytics workspaces (which Setting4 likely represents as a destination) allow you to configure data retention periods ranging from 30 to 730 days, making that statement correct. Diagnostic settings have restrictions on the number of Log Analytics workspace destinations they can send to simultaneously - typically only one Log Analytics workspace per diagnostic setting - meaning Setting2 cannot have both Analytics1 and Analytics2 as destinations at the same time.

Topics

#Microsoft Entra Diagnostic Settings#Log Analytics Workspace Retention#Azure Monitor#Microsoft Defender for Cloud

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice