Chapter 1

1. Yes—Log Analytics is integrated in Azure Monitor. However, the data is still stored inside the Log Analytics Workspace.
2. No—you can't use SQL. You need to use the Kusto Query Language to query the data.
3. No—Action Groups are unique sets of recipients and actions that can be shared across multiple alert rules.
4. IP Flow verify—Next Hop only proves connectivity with the next appliance and doesn't allow ports to be defined. Packet capture is for capturing data as it flows in and out of a VM.
5. Budgets from Subscription