What should you do?

You have an Azure Storage account.

You need to configure the storage account to send an email when an administrative action is performed on the account.

What should you do?
A . Enable Azure Advanced Threat Protection (ATP).
B . Create an alert based on a metric.
C . Create an alert based on the activity log.
D . Create a custom role for the storage account.

View Answer

Answer: C

Explanation:

To determine if there is an activity log alert created for "Create/Update Storage Account" events in your Microsoft Azure cloud account, perform the following actions:

✑ Sign in to Azure Management Console.

✑ Navigate to Azure Monitor blade

✑ In the navigation panel, select Alerts to access all the alerts available in your cloud account.

✑ On the Alerts page, click on the Manage alert rules button from the dashboard top menu to access the alert rules management page.

✑ On the Rules page, select the subscription that you want to examine from the Subscription filter box and the Enabled option from the Status dropdown list, to return all the active alert rules created in the selected account subscription.

✑ Click on the name of the alert rule that you want to examine.

✑ On the selected alert rule configuration page, check the condition phrase available in the Condition section. If the phrase is different than Whenever the Activity Log

has an event with Category=’Administrative’, Signal name=’Create/Update Storage Account (Microsoft.Storage/storageAccounts)’, the selected alert rule is not designed to fire whenever "Create Storage Account" or "Update Storage Account" events are triggered.

Reference: https://www.cloudconformity.com/knowledge-base/azure/ActivityLog/create-storage-account-alert.html