As the admin for RedWidgetCo, you are responsible for monitoring your Azure virtual machines. You need to retrieve the Windows Event Logs collected by Azure Diagnostics for a VM called RWAPP01. The hard drive of the VM is located in the storage account called RWStorageAcct but Azure Diagnostics is configured to use a different storage account called RWDiagStorage.
How should you go about retrieving the Windows Event Logs for RWAPP01? Choose one.
A. Connect to RWStorageAcct and browse the blobs
B. Connect to RWDiagStorage and browse the tables
C. Connect to RWStorageAcct and browse the tables
The answer is B. Because Azure Diagnostics uses the RWDiagStorage account, the Windows Event Logs are stored in this account. Additionally, the event logs are stored in table format (not as a flat file). As such, you should connect to the RWDiagStorage account and browse the tables.
Click here for my PREMIUM practice questions.