Your on-premises network contains 100 virtual machines that run Windows Server 2019.
You have an Azure subscription that contains an Azure Log Analytics workspace named Workspace1.
You need to collect errors from the Windows event logs on the virtual machines.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Create an Azure Event Grid domain.

B. Deploy the Microsoft Monitoring Agent.

C. Configure Windows Event Forwarding on the virtual machines.

D. Create an Azure Sentinel workspace.

E. Configure the Data Collection settings for Workspace1.






 

Suggested Answer: BE

The Azure Log Analytics agent collects telemetry from Windows and Linux virtual machines in any cloud, on-premises machines, and those monitored by System
Center Operations Manager and sends it collected data to your Log Analytics workspace in Azure Monitor.
Note: You may also see the Log Analytics agent referred to as the Microsoft Monitoring Agent (MMA) or OMS Linux agent.
Data is collected using the Log Analytics agent, which reads various security-related configurations and event logs from the machine and copies the data to your workspace for analysis.
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/log-analytics-agent
 https://docs.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection

This question is in AZ-303 Microsoft Azure Architect Technologies Exam
For getting Microsoft Certified: Azure Solutions Architect Expert Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.