Microsoft Azure Architect Design (AZ-304) Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Microsoft Azure Architect Design (AZ-304) Exam with comprehensive quiz questions designed to enhance your understanding and confidence. Master essential Azure concepts and strategies to excel on your test day!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which log table would you report on for events from Linux system logging in Azure?

  1. Azure Activity

  2. Event

  3. Syslog

  4. Azure Diagnostics

The correct answer is: Syslog

The log table used for reporting events generated by Linux system logging in Azure is Syslog. This table is specifically designed to capture logs from Linux-based machines, which utilize the syslog protocol for logging events. In an Azure environment, when you configure diagnostics and monitoring for Linux VMs, the information sent to Azure Monitor can include logs generated by syslog. The Syslog table collects these logs, enabling the analysis and monitoring of system events, such as login attempts, system errors, and other significant operational messages. This allows administrators to gain insights into the behavior and performance of their Linux systems running in Azure, making it crucial for maintaining system health and security. On the other hand, Azure Activity records actions taken on Azure resources at the subscription level and doesn’t capture Linux-specific system log events. The Event table generally pertains to events related to Azure services rather than lower-level Linux system logging. Azure Diagnostics encompasses a broader range of diagnostic data from Azure resources, but it does not specifically focus on the Linux syslog. Hence, for Linux system logging in Azure, the appropriate choice is indeed the Syslog table.