CV0-002 · Question #324
A cloud provider is increasingly discovering hard-to-find issues within the growing infrastructure. The provider has all the basic necessary tools implemented to collect and store data regarding the…
The correct answer is A. Event correlation. To build intelligence and focus on relevant events from collected data, event correlation is the most appropriate technique.
Question
A cloud provider is increasingly discovering hard-to-find issues within the growing infrastructure. The provider has all the basic necessary tools implemented to collect and store data regarding the environment. To allow the cloud provider to focus on relevant events, which of the following is the MOST appropriate technique to build intelligence?
Options
- AEvent correlation
- BEvent collection
- CEvent alerts
- DEvent-based workflows
How the community answered
(57 responses)- A74% (42)
- B4% (2)
- C9% (5)
- D14% (8)
Why each option
To build intelligence and focus on relevant events from collected data, event correlation is the most appropriate technique.
Event correlation is the process of analyzing multiple events from various sources to identify relationships, patterns, and sequences, thereby distinguishing significant issues from unrelated noise. This technique directly helps in building intelligence to focus on relevant events and diagnose hard-to-find issues from existing collected data.
Event collection is explicitly stated as already being implemented by the cloud provider, so it's not the next step to build intelligence.
Event alerts are the outcome of identifying significant events, often after correlation, but not the technique used to build intelligence and discern relevant events from a large dataset.
Event-based workflows involve automating actions in response to specific events, which occurs after events have been identified and intelligence has been built, rather than being the technique to build that intelligence itself.
Concept tested: IT Operations Event Correlation
Source: https://learn.microsoft.com/en-us/azure/azure-monitor/logs/alerts-unified-log
Topics
Community Discussion
No community discussion yet for this question.