AZ104-Q: investigate failed operations over time
An administrator needs to find failed operations across resources for the last 24 hours and group them by operation name. Where should they query?
- A) The relevant Log Analytics workspace using KQL, after sending the required diagnostic data there. ✓
- B) A VM’s resource lock.
- C) An Azure DNS zone.
- D) A storage access key. Answer: A. Log Analytics and KQL support time-based investigation and aggregation of collected logs. Why not the others: The other resources do not query operational log data.