Exam AZ-104 topic 6 question 57 discussion

Actual exam question from Microsoft's AZ-104

Question #: 57
Topic #: 6

You have an Azure subscription that has Traffic Analytics configured.

You deploy a new virtual machine named VM1 that has the following settings:

• Region: East US
• Virtual network: VNet1
• NIC network security group: NSG1

You need to monitor VM1 traffic by using Traffic Analytics.

Which settings should you configure?

A. Diagnostic settings for VM1
B. NSG flow logs for NSG1
C. Diagnostic settings for NSG1
D. Insights for VM1

Show Suggested Answer

Suggested Answer: B 🗳️

by FreeSwan at Sept. 29, 2023, 3:08 p.m.

Comments

Submit Cancel

Vestibal

Highly Voted 1 year, 10 months ago

Selected Answer: B

NSG flow logs are a feature of Azure Network Watcher that allows logging of information about IP traffic flowing through a network security group. This data can be used by Traffic Analytics to analyze network traffic in your environment. By enabling NSG flow logs for NSG1, the Network Security Group associated with VM1, you would be able to monitor the traffic of VM1 using Traffic Analytics https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics https://learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-tutorial

upvoted 15 times

c75e123

7 months, 2 weeks ago

Answer is B Prerequisites Network security group flow logs enabled for the network security groups you want to monitor or virtual network flow logs enabled for the virtual network you want to monitor. https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics?tabs=Americas#prerequisites

upvoted 1 times

...

FreeSwan

Highly Voted 1 year, 10 months ago

NSG Flow logs for NSG1 https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics

upvoted 12 times

...

Ni22

Most Recent 1 year, 2 months ago

6/13/24 on exam

upvoted 5 times

...

Amir1909

1 year, 4 months ago

B is correct

upvoted 1 times

...

HiDhiman

1 year, 6 months ago

Option C: Diagnostic settings for NSG Traffic Analytics relies on NSG flow logs for its data source. To enable Traffic Analytics for VM1, you need to configure diagnostic settings for NSG1, as it is the NSG associated with VM1's NIC. This allows NSG flow logs to be sent to a storage account, and Traffic Analytics can then process and analyze these logs.

upvoted 2 times

...

rex3

1 year, 9 months ago

Selected Answer: B

To monitor VM1 traffic using Traffic Analytics, you need to have NSG flow logs enabled for the network security group that is associated with the virtual machine's network interface. Traffic Analytics is powered by NSG flow logs, which record information about IP traffic flowing through an NSG. Therefore, the correct setting to configure is: B. NSG flow logs for NSG1

upvoted 2 times

...