Exam-Answer

Home / Microsoft / AZ-300 / Question 24

Prev Question
Next Question

Question 24

You need to retrieve data from Log Analytics on virtual machines (VMs) hosted on Azure. You must write a Log Analytics query that meets the following requirements:

* Find VMs that have failed to send a heartbeat signal within the previous hour

* Summarize the data by operating system type

How should you complete the query? Select correct placeholder values.

Heartbeat

| where PLACEHOLDER 1

| summarize distinct_computers= PLACEHOLDER 2 (Computer) by OSType

Answers



A B C D E F

Advertisement

Explanation

You should use the following command:

Heartbeat

|where TimeGenerated > ago(1h)

|summarize distinct_computers=Dcount(Computer) by OSType

You should use the TimeGenerated > ago(1h) condition to find all heartbeats that have been generated within the last hour. The ago(1h) function is a shortcut of the now(-1h) function and has the same meaning.

You should not use the TimeGenerated > now(1h) condition to find all heartbeats that have been generated within last hour. The now(1h) function would find events older than one hour.

You should not use the now()-TimeGenerated > 1h condition to find all heartbeats that have been generated within last hour. The now()-TimeGenerated > 1h function would find events older than one hour.

You should use the Dcount function to calculate the distinct number of computers that have sent a heartbeat signal within the last hour.

You should not use the count function to calculate the distinct number of computers that have sent a heartbeat signal within the last hour. The count function would sum all the heartbeat signals.

You should not use the Dcountif function to calculate the distinct number of computers that have sent a heartbeat signal within the last hour. This function is used to add a filter to the counting process. For example, you could count only computers running Linux.

References

Comments

Load more
Prev Question
Next Question