Exam Preparation Quiz

Explanations for each answer:

• Join Azure AD is correct.
• Configure Windows Defender Firewall is incorrect. Configuring the firewall alone won't enable Log Analytics queries. Windows Defender Firewall is a network security system that monitors and controls incoming and outgoing network traffic, but configuring it does not establish the required authentication and connectivity to Azure Log Analytics.
• Create an event subscription is incorrect. Event subscriptions are not required for Log Analytics queries. Event subscriptions are used to route events from an event source to a destination for event handling and automation, which is unrelated to querying logs from a workgroup computer.
• Install the Azure Monitor Agent is incorrect. The Azure Monitor Agent is required for collecting monitoring data from the operating system and sending it to Azure Monitor, but it requires proper authentication through Azure AD to function correctly. You must first join the device to Azure AD.