A security team needs to alert when an Azure resource is deleted in a production subscription. Which alert type should they configure?
- A Metric alert on DeleteResource metric
- B Activity Log alert on 'Delete' operations in the resource group (correct answer)
- C Application Insights event alert
- D Scheduled log alert
Shortcut: Activity Log alerts trigger on Azure control plane events. */delete', filtered to the production resource group.
Activity Log alerts trigger on Azure control plane events. Configure an alert on event category 'Administrative', operation 'Microsoft.*/delete', filtered to the production resource group.