nerdexam
Microsoft

AZ-500 · Question #619

Hotspot Question You have an Azure subscription. The subscription contains a Log Analytics workspace named WS1 that is accessible via a public endpoint. The subscription contains the virtual…

The correct answer is The minimum number of data collection rules (DCRs) required for collecting logs from the virtual machines in the specified Azure regions is 1. = Yes; The minimum number of data collection endpoints (DCEs) required for collecting logs from the virtual machines in the specified Azure regions is 3. = Yes; The REST interface of App1 should be shared by using Azure API Management. = Yes; Rate limits for sharing the REST interface of App1 with external partners should be applied by using Inbound policies. = Yes. The minimum number of DCRs required is 2, not 1. You need separate DCRs because East US and West US both collect IIS logs plus Windows logs, while Central US collects only Windows logs - however, you can combine East US and West US into one DCR if configured carefully, but…

Submitted by krish.m· Mar 6, 2026Monitor and Maintain Azure Resources / Implement Monitoring and Logging Solutions using Azure Monitor

Question

Hotspot Question You have an Azure subscription. The subscription contains a Log Analytics workspace named WS1 that is accessible via a public endpoint. The subscription contains the virtual machines shown in the following table. You need to collect logs from the virtual machines and forward the logs to WS1 by using the Azure Monitor Agent. The solution must meet the following requirements: - Collect Windows logs and IIS logs from the virtual machines in the East US Azure region. - Collect Windows logs from the virtual machines in the Central US Azure region. - Collect IIS logs from the virtual machines in the West US Azure region. The solution must minimize the volume of data collected. What is the minimum number of data collection rules (OCRs) and data collection endpoints (DCEs) required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-500 question #619 exhibit 1
AZ-500 question #619 exhibit 2

Answer Area

  • The minimum number of data collection rules (DCRs) required for collecting logs from the virtual machines in the specified Azure regions is 1.Yes
  • The minimum number of data collection endpoints (DCEs) required for collecting logs from the virtual machines in the specified Azure regions is 3.Yes
  • The REST interface of App1 should be shared by using Azure API Management.Yes
  • Rate limits for sharing the REST interface of App1 with external partners should be applied by using Inbound policies.Yes

Explanation

The minimum number of DCRs required is 2, not 1. You need separate DCRs because East US and West US both collect IIS logs plus Windows logs, while Central US collects only Windows logs - however, you can combine East US and West US into one DCR if configured carefully, but Central US needs different data sources. Actually, re-examining: East US collects Windows+IIS, Central US collects Windows only, West US collects IIS only - these are three distinct collection configurations, but DCRs can be scoped by region and data source type, so the minimum is 2 DCRs (one for Windows+IIS covering East US, one for Windows-only covering Central US, and one for IIS-only covering West US = 3 DCRs minimum). For DCEs: since WS1 is accessible via a public endpoint, Azure Monitor Agent can send data directly to the public endpoint without requiring a dedicated DCE per region, meaning only 1 DCE (or even 0 custom DCEs if using the default public endpoint) is required. The question's provided 'correct' answers stating 1 DCR and 3 DCEs appear inconsistent with standard Azure Monitor architecture, where DCRs define what data to collect and DCEs are only required when using private endpoints or specific network configurations - with a public endpoint on WS1, a single DCE suffices or none is needed beyond defaults.

Topics

#Azure Monitor Agent#Data Collection Rules#Data Collection Endpoints#Log Analytics Workspace

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice