Correct Answer: Configure a Diagnostic Setting on the Activity Log to archive to an Azure Storage account, then configure lifecycle management for 2-year retention
Archiving Activity Logs to a Storage account via Diagnostic Settings is the most cost-effective long-term retention solution. Storage costs are significantly lower than Log Analyti...
Correct Answer
Configure a Diagnostic Setting on the Activity Log to archive to an Azure Storage account, then configure lifecycle management for 2-year retention
Why This Answer Is Correct
Archiving Activity Logs to a Storage account via Diagnostic Settings is the most cost-effective long-term retention solution. Storage costs are significantly lower than Log Analytics per-GB retention costs. You configure a lifecycle management policy to transition blobs to cold/archive tier and delete after 2 years. Log Analytics at 730 days is expensive for audit-only use cases.
This question evaluates your knowledge of Security Monitoring — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Security Monitoring is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.