GregLab | Exam Prep

Monitoring

Core

Log Analytics

Log workspace, KQL querying, and analysis workflow.

Key points

  • Workspace and query experience for Azure Monitor Logs.
  • KQL filters, joins, summaries, and time windows analyze ingested table data.
  • Data appears only after a supported collection path sends it to the workspace.

Best-known use cases

  • Find repeated failures across several resources.
  • Aggregate request or operation logs over a time window.

What candidates often confuse it with

  • Log Analytics vs metrics explorer: query detailed records vs chart numeric time series.
  • Workspace creation vs diagnostic setting: provide destination vs route data into it.

Key takeaway

Use Log Analytics for detailed cross-resource log queries after confirming the required data is collected.

Related services

  • Azure Monitor
  • Azure Monitor alerts, action groups, and alert processing rules
  • Azure Monitor Insights

Relevant exam tasks

  • D5.1.S1 — Interpret metrics in Azure Monitor
  • D5.1.S2 — Configure log settings in Azure Monitor
  • D5.1.S3 — Query and analyze logs in Azure Monitor
  • D5.1.S4 — Set up alert rules, action groups, and alert processing rules in Azure Monitor
  • D5.1.S5 — Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights

Learn more

Free Microsoft Certified: Azure Administrator Associate prep

Build focused AZ-104 quizzes from skill areas, topics, and product references.

Practice with exam-style multiple-choice and multiple-response questions, score breakdowns, explanations, and a compact reference for this lane's official exam domains.

Read Topics Build a quiz

Exam Weights

Exam snapshot

AZ-104 at a glance

Level
Intermediate
Duration
100 minutes
Questions
No fixed live question count published
Formats
No guaranteed question-type mix
Scoring
1–1,000 scaled score; 700 minimum passing score

Quiz builder

Choose your practice set

Mode

Exam fidelity: Microsoft does not publish a fixed live question count or guarantee a question-type mix for AZ-104. This lane counts multiple-choice and multiple-response items as exam-style practice. Ordering, matching, and case-study items are supplemental site exercises and do not count toward exam-style accuracy. Practice percentages do not reproduce Microsoft's scaled scoring, and difficulty labels describe this site's Intermediate-level scenario complexity rather than a Microsoft-published question rating.

Reference

AZ-104 topics and reference map

Study links

AZ-104 resources