HOTSPOT -
You have an Azure subscription that contains the resources shown in the following table.
You create the Azure Storage accounts shown in the following table.
You need to configure auditing for SQL1.
Which storage accounts and Log Analytics workspaces can you use as the audit log destination? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Storage 1 and 2 https://docs.microsoft.com/en-us/azure/azure-sql/database/audit-log-format#:~:text=Blob%20audit,in%20the%20Azure%20storage%20account. Log analytics 1,2 and 3
agreed tested
Storage needs to be in same region (East US). Hence Storage - Storage1 and Storage2 only. Log Analytics can be in any region. Hence it can be Storage1, Storage2 or Storage3
https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-setup?view=azuresql#audit-to-storage-destination If you are deploying from the Azure portal, make sure that the storage account is in the same region as your database and server. If you are deploying through other methods, the storage account can be in any region.
Please consider Storage tier
impliedly, the storage for log Analytics will be frequently accessed. as such storage 1 "cool tie" is out of it. even though it is in the same region (East US) correct answer =storage 2 only
i agree with it. the same question appeared in Az-301 past year
Audit log has low storage cost and will only be accessed during audit review. Hence its actually most suitable: Cool tier - An online tier optimized for storing data that is infrequently accessed or modified. Data in the Cool tier should be stored for a minimum of 30 days. The Cool tier has lower storage costs and higher access costs compared to the Hot tier. Furthermore the question did not ask which storage is most suitable, but rather "can be used".
Agree, storage for log analytics should be hot tier however the question is tricky. It asks for "can be stored" rather than "should be stored"
In exam Dec 21. 40 questions, 1 case study, no labs. I went with Storage 1 an 2 and all LAWs.
1. Storage1, Storage2, and Storage3 2. Analytics1, Analytics2, and Analytics3 https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-setup?view=azuresql#audit-to-storage-destination If you are deploying from the Azure portal, make sure that the storage account is in the same region as your database and server. If you are deploying through other methods, the storage account can be in any region.
Finally, you are the only person and I am second one may be who spent time on this question. Your answer is right and others does not even reserch sorry to say this guys but please at least search something or check link what you share.!
I'm having my exam in a few hours. If I will pass is for you and Zellck!!
in exam 26/11/2021
Storage 1 & 2 - Reference: https://learn.microsoft.com/en-us/azure/storage/blobs/access-tiers-overview?source=recommendations Cool tier - An online tier optimized for storing data that is infrequently accessed or modified. Data in the cool tier should be stored for a minimum of 30 days. The cool tier has lower storage costs and higher access costs compared to the hot tier. Any reason why audit log can't be stored in blob storage with 'cool' tier?
https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-overview?view=azuresql Premium storage with BlockBlobStorage is supported. Standard storage is supported. However, for audit to write to a storage account behind a VNet or firewall, you must have a general-purpose v2 storage account. If you have a general-purpose v1 or blob storage account, upgrade to a general-purpose v2 storage account. For specific instructions see, Write audit to a storage account behind VNet and firewall. For more information, see Types of storage accounts.
In exam Feb 23. 47 questions, 1 case study, no labs.
Storage 2 Only Analytics 1, Analytics 2, and Analytics 3
The answer are correct, you can't have sql auditing in different location but you can have log analytics in geolocation: Storage: 2 Only Log Analytics: 1, 2, and 3
Storage 1 location is also same as Storage 2
Consider storage account type. Blob Storage account (Storage 1) is the answer; GPv1 is not recommended. https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
Storage: 2 Only (storage 1 will not be used as the access tier is "Cool") Log Analytics: 1, 2, and 3
Storage 1 and 2 Log analytics 1,2 and 3 https://docs.microsoft.com/en-us/azure/azure-sql/database/audit-log- format#:~:text=Blob%20audit,in%20the%20Azure%20storage%20account.
Salah lagi jawapan. HAdeiii
storage1 & 2 both worked on lab
Storage 1 and 2 Log analytics 1,2 and 3 https://docs.microsoft.com/en-us/azure/azure-sql/database/audit-logformat#:~: text=Blob%20audit,in%20the%20Azure%20storage%20account.
Created a blob with cool access tier and was able to add it, from the portal only the storage accounts which are in the same location can be used for data auditing hence Storage 1 and 2 is the right answer