Traffic Analytics requires the following prerequisites: A Network Watcher enabled subscription. Network Security Group (NSG) flow logs enabled for the NSGs you want to monitor. An Azure Storage account, to store raw flow logs. An Azure Log Analytics workspace, with read and write access. Your account must meet one of the following to enable traffic analytics: Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor.

Correct Answer: A - Yes Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor. Reader role - View all resources, but does not allow you to make any changes. Traffic Analytics is a cloud-based solution that provides visibility into user and application activity in cloud networks. Traffic analytics analyzes Network Watcher network security group (NSG) flow logs to provide insights into traffic flow in your Azure cloud. Reference: https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-faq https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Read in the important line, to enable Traffic Analytics So, Reader permission will not allow to enable or activate the feature.

"enable Traffic Analytics for an Azure subscription" The answer is No

How could a user with a READER role ENABLE something?! Just think.

No, As MS.

B, reader role works too

I passed with these questions and many friends passed too, all questions appeared in the real exam a great study resource, contact me on [email protected]

I passed with these questions and many friends passed too, all questions appeared in the real exam a great study resource, contact me on [email protected]

Reader cant enable traffic analytics https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites https://learn.microsoft.com/en-us/azure/network-watcher/required-rbac-permissions#traffic-analytics

One of the following Azure built-in roles needs to be assigned to your account: Deployment model Role Resource Manager Owner Contributor Network contributor and Monitoring contributor

Answer is NO https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites

The answer is NO: From the official doc: "One of the following Azure built-in roles needs to be assigned to your account: Deployment model Role Resource Manager Owner Contributor Network contributor 1 and Monitoring contributor " https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics

See: https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements

Microsoft has update documentation: owner, contributor or network contributor only. So NO.

Wrong answer. Prerequisites Traffic analytics requires: A Network Watcher enabled subscription. For more information, see Enable or disable Azure Network Watcher NSG flow logs enabled for the network security groups you want to monitor. For more information, see Create a flow log. An Azure Log Analytics workspace with read and write access. For more information, see Create a Log Analytics workspace One of the following Azure built-in roles needs to be assigned to your account: Deployment model Role Resource Manager Owner Contributor Network Contributor

It should be No https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements