Configuring NetworkSecurityGroupRuleCounter Logs for VNET01-Subnet0-NSG in Azure Storage | Exam AZ-500 Microsoft Azure Security Technologies

Store NetworkSecurityGroupRuleCounter logs for VNET01-Subnet0-NSG in logs11597200 Azure Storage account for 30 days

Question

SIMULATION -

You need to ensure that the events in the NetworkSecurityGroupRuleCounter log of the VNET01-Subnet0-NSG network security group (NSG) are stored in the logs11597200 Azure Storage account for 30 days.

To complete this task, sign in to the Azure portal.

Explanations

See the explanation below.

You need to configure the diagnostic logging for the NetworkSecurityGroupRuleCounter log.

1. In the Azure portal, type Network Security Groups in the search box, select Network Security Groups from the search results then select VNET01-

Subnet0-NSG. Alternatively, browse to Network Security Groups in the left navigation pane.

2. In the properties of the Network Security Group, click on Diagnostic Settings.

3. Click on the Add diagnostic setting link.

4. Provide a name in the Diagnostic settings name field. It doesn't matter what name you provide for the exam.

5. In the Log section, select NetworkSecurityGroupRuleCounter.

6. In the Destination details section, select Archive to a storage account.

7. In the Storage account field, select the logs11597200 storage account.

8. In the Retention (days) field, enter 30.

9. Click the Save button to save the changes.

Sure, here are the detailed steps to complete the task:

  1. Sign in to the Azure portal using your credentials.
  2. Open the Azure Storage account logs11597200 that you want to use to store the logs.
  3. Navigate to the "Firewalls and virtual networks" section of the Storage account.
  4. Click on the "Virtual networks" tab.
  5. Click on the "Add +" button to add a virtual network to the storage account.
  6. In the "Add virtual network" page, select the "VNET01-Subnet0-NSG" network security group from the dropdown list.
  7. Choose the "NetworkSecurityGroupRuleCounter" log type from the dropdown list of log types.
  8. Set the "Retention (days)" to "30" days.
  9. Click the "Save" button to save the settings.

That's it! The events in the NetworkSecurityGroupRuleCounter log of the VNET01-Subnet0-NSG network security group should now be stored in the logs11597200 Azure Storage account for 30 days.