Which Agent to Choose: AMA or MMA?

Correct Answer: E Option E is correct.

Azure Monitor agent (AMA) collects monitoring data from the guest operating system of Azure virtual machines and delivers it to Azure Monitor.

It sends data from Linux VMs to multiple workspaces and uses XPATH queries to filter which Windows events are collected.

Also, it overcomes multiple issues from Log Analytics Agent such as support for Private Links, collecting file based logs or IIS logs.

Reference:

The correct answer to this question is A. The AMA agent supports Windows event filtering.

Explanation:

The Microsoft Monitoring Agent (MMA) and the Azure Monitor Agent (AMA) are both agents used for collecting data and sending it to Azure Monitor for monitoring and analysis. The AMA is the newer of the two agents and has some additional features that the MMA does not have.

Option A is correct because the AMA agent supports Windows event filtering. This means that the AMA agent can filter the events it collects based on certain criteria, such as event ID or event source, before sending them to Azure Monitor. This can help reduce the amount of data sent to Azure Monitor and improve performance.

Option C is incorrect because although the MMA agent is being deprecated in 2024, this is not a reason to choose the AMA agent over the MMA agent.

Option D is incorrect because the AMA agent does not support Linux multi-homing. Multi-homing refers to the ability of a system to have multiple network interfaces with different IP addresses.

Option B is incorrect because there is at least one correct option (option A).

Therefore, the correct answer is A. The AMA agent supports Windows event filtering.