You have 100 computers that run Windows 10 and connect to an Azure Log Analytics workspace. Which three types of data can you collect from the computers by using Log Analytics? Each correct answer a…

Question

Options

• Afailure events from the Security log
• Bthe average processor utilization
• Cthird-party application logs stored as text files
• Derror events from the System log
• Ethe list of processes and their execution times

• A
  8% (2)
• B
  73% (19)
• E
  19% (5)

Explanation

The correct answers are B, C, and D. Azure Log Analytics (via the Log Analytics agent / MMA) can collect: (B) Performance counters such as average processor utilization, (C) Custom logs - including third-party application logs written as text files using the Custom Logs feature, and (D) Windows Event log entries such as error events from the System log. Option A (failure events from the Security log) is incorrect because Security log collection requires specific audit policy configuration and additional setup beyond standard Log Analytics, making it unreliable in this context. Option E (list of processes and their execution times) is not a standard Log Analytics data source - that capability comes from solutions like Defender for Endpoint or VM Insights Process Map, not basic Log Analytics collection.

No community discussion yet for this question.