An enterprise wants to ensure that all their Azure Activity logs are protected from being tampered with or deleted, even if their subscription administrative accounts are compromised. Which feature provides the strongest protection for log integrity?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Export to a Storage Account with 'Immutable Storage' (Lock) and Log Analytics with 'Data Export'

Immutable storage in Azure prevents anyone from deleting the logs, and exporting to a separate, hardened subscription adds an extra layer of security....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioScenario Based

An enterprise wants to ensure that all their Azure Activity logs are protected from being tampered with or deleted, even if their subscription administrative accounts are compromised. Which feature provides the strongest protection for log integrity?

โœ“ Correct Answer & ExplanationScenario Based

Correct Answer

Export to a Storage Account with 'Immutable Storage' (Lock) and Log Analytics with 'Data Export'

Why This Answer Is Correct

Immutable storage in Azure prevents anyone from deleting the logs, and exporting to a separate, hardened subscription adds an extra layer of security.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Scenario Based โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.