Microsoft Certified: Azure AI Engineer AssociatePlan and manage an Azure AI solutionHard
A financial institution is developing an Azure AI solution to detect fraudulent transactions using Azure Machine Learning. The solution processes sensitive customer data, and the company requires a robust audit trail of all access to the data and the AI models, including who accessed what, when, and from where. This audit trail must be immutable and retained for seven years. Which Azure service is best suited for collecting and retaining these audit logs?
- AAzure Monitor Log Analytics workspace
- BAzure Data Lake Storage Gen2
- CAzure Storage Accounts (Blob Storage)
- DAzure Cosmos DB
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Monitor Log Analytics workspace
Azure Monitor Log Analytics workspace is the best choice for collecting and retaining audit logs. It provides a centralized service for collecting logs and metrics from various Azure resources, offers powerful querying capabilities (KQL), supports long-term retention policies (up to 7 years or more), and ensures immutability for compliance purposes.
Why the other options are wrong
- B. Azure Data Lake Storage Gen2 is optimized for large-scale analytics data, not primarily for structured, queryable audit logs with built-in retention policies like Log Analytics.
- C. Azure Storage Accounts (Blob Storage) can store logs, but it lacks the built-in querying capabilities, structured logging, and direct integration with Azure resources for auditing compared to Log Analytics.
- D. Azure Cosmos DB is a NoSQL database for transactional workloads, not ideally suited as the primary service for collecting and retaining immutable audit logs from Azure services.
Azure Monitor Log Analytics for Auditing
Azure Monitor Log Analytics workspace provides a centralized, queryable, and long-term storage solution for audit logs from Azure resources, crucial for compliance and security auditing.
- Collects logs and metrics from various Azure services.
- Offers powerful KQL (Kusto Query Language) for analysis.
- Supports long-term data retention and immutability for compliance.
Memory trick: Logs 'Analyze' and 'Retain' for immutable audits.