Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AZ-104 topic 2 question 35 discussion

Actual exam question from Microsoft's AZ-104
Question #: 35
Topic #: 2
[All AZ-104 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription.
Solution: You assign the Reader role at the subscription level to Admin1.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Your account must meet one of the following to enable traffic analytics:
Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor.
Reference:
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-faq

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
asmodeus
Highly Voted 3 years ago
Traffic Analytics requires the following prerequisites: A Network Watcher enabled subscription. Network Security Group (NSG) flow logs enabled for the NSGs you want to monitor. An Azure Storage account, to store raw flow logs. An Azure Log Analytics workspace, with read and write access. Your account must meet one of the following to enable traffic analytics: Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor.
upvoted 95 times
mac_ani
7 months, 1 week ago
Answer is NO. Refer the following link: https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-faq Your account must meet one of the following to enable traffic analytics: Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, or network contributor.
upvoted 71 times
...
keyboardmastermind
3 months, 2 weeks ago
You guys know that Microsoft updates their exams and documentation upon update of Azure?
upvoted 3 times
...
rodolfodc
7 months, 1 week ago
Answer is NO. Your account must meet one of the following to enable traffic analytics: Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, or network contributor.
upvoted 25 times
...
UWSFish
7 months, 3 weeks ago
My take is that both the question and documentation are wrong...accordingly MSFT will mark A as the correct answer. But...I mean go ahead and try crating a storage account or enabling flow logs with reader. Can't do it. Regardless, I highly doubt Microsoft will mark what their own documentation says wrong.
upvoted 3 times
...
...
mlantonis
Highly Voted 2 years, 6 months ago
Correct Answer: A - Yes Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor. Reader role - View all resources, but does not allow you to make any changes. Traffic Analytics is a cloud-based solution that provides visibility into user and application activity in cloud networks. Traffic analytics analyzes Network Watcher network security group (NSG) flow logs to provide insights into traffic flow in your Azure cloud. Reference: https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-faq https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
upvoted 91 times
xupiter
2 years, 5 months ago
"Reader role - View all resources, but does not allow you to make any changes." So that means this role doesn't allow you to enable traffic analytics. So it cannot be "Yes".
upvoted 17 times
Mozbius_
1 year, 10 months ago
Yet it is "Yes". You can blame Microsoft for the confusion. https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-faq
upvoted 7 times
GoldenDisciple2
3 months, 3 weeks ago
According to Microsoft, the sky is up, but the answer is down. To Microsoft, the ocean is wet but the answer is dry, the desert is dry but on the exam you must select wet or you'll get it wrong... According to Microsoft, the air in space is breathable... Let me explain. The earth has breathable air and the earth is in space, therefor, the air in space is breathable...
upvoted 6 times
shahidsayyed
1 month, 1 week ago
You should try standup comedy as an alternative career. Got into wrong profession.
upvoted 2 times
...
...
...
...
hercu
2 years, 5 months ago
I think the answer is correct as it's assumed that the prerequisites to use traffic analytics are already met. Refering to: https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-faq#what-are-the-prerequisites-to-use-traffic-analytics- As a result, as stated just few lines below, all following roles: Owner, Contributor, Reader, or Network Contributor are sufficient to enable Traffic Analytics.
upvoted 3 times
...
...
TSKARAN
Most Recent 1 week ago
Read in the important line, to enable Traffic Analytics So, Reader permission will not allow to enable or activate the feature.
upvoted 1 times
...
Isumby10
1 week, 1 day ago
Selected Answer: B
"enable Traffic Analytics for an Azure subscription" The answer is No
upvoted 1 times
...
ggogel
1 week, 2 days ago
How could a user with a READER role ENABLE something?! Just think.
upvoted 1 times
...
Trs223333
1 week, 6 days ago
Selected Answer: B
No, As MS.
upvoted 1 times
...
DBFront
4 weeks ago
Selected Answer: B
B, reader role works too
upvoted 1 times
...
mattpaul
1 month, 1 week ago
I passed with these questions and many friends passed too, all questions appeared in the real exam a great study resource, contact me on [email protected]
upvoted 2 times
...
mattpaul
1 month, 1 week ago
I passed with these questions and many friends passed too, all questions appeared in the real exam a great study resource, contact me on [email protected]
upvoted 1 times
...
haidersabeeh
1 month, 2 weeks ago
Selected Answer: B
Reader cant enable traffic analytics https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites https://learn.microsoft.com/en-us/azure/network-watcher/required-rbac-permissions#traffic-analytics
upvoted 2 times
...
Alex_W
1 month, 3 weeks ago
One of the following Azure built-in roles needs to be assigned to your account: Deployment model Role Resource Manager Owner Contributor Network contributor and Monitoring contributor
upvoted 2 times
...
TobeReto
1 month, 3 weeks ago
Answer is NO https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites
upvoted 1 times
...
JoaoPrates
1 month, 3 weeks ago
The answer is NO: From the official doc: "One of the following Azure built-in roles needs to be assigned to your account: Deployment model Role Resource Manager Owner Contributor Network contributor 1 and Monitoring contributor " https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics
upvoted 1 times
...
onlyNeki
1 month, 3 weeks ago
Selected Answer: B
See: https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements
upvoted 1 times
...
amsioso
1 month, 3 weeks ago
Microsoft has update documentation: owner, contributor or network contributor only. So NO.
upvoted 2 times
...
Babustest
2 months ago
Wrong answer. Prerequisites Traffic analytics requires: A Network Watcher enabled subscription. For more information, see Enable or disable Azure Network Watcher NSG flow logs enabled for the network security groups you want to monitor. For more information, see Create a flow log. An Azure Log Analytics workspace with read and write access. For more information, see Create a Log Analytics workspace One of the following Azure built-in roles needs to be assigned to your account: Deployment model Role Resource Manager Owner Contributor Network Contributor
upvoted 2 times
...
pep138
2 months, 1 week ago
Selected Answer: B
It should be No https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...