Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AZ-104 topic 5 question 73 discussion

Actual exam question from Microsoft's AZ-104
Question #: 73
Topic #: 5
[All AZ-104 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage a virtual network named VNet1 that is hosted in the West US Azure region.
VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.
You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.
Solution: From Azure Network Watcher, you create a packet capture.
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A ūüó≥ÔłŹ
Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactively. Other uses include gathering network statistics, gaining information on network intrusions, to debug client-server communications and much more.
Reference:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture-overview

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
mashk19
Highly Voted 2 years, 5 months ago
If you initiated a packet capture from VM1 to VM2 and ran a capture for three hours, wouldn't you have file which contained all traffic between VM1 and VM2?
upvoted 23 times
JayBee65
2 years, 5 months ago
Yes exactly
upvoted 2 times
...
s9p3r7
2 years, 5 months ago
yes you would, considering you didn't specify any filtering which is optional.
upvoted 4 times
...
omw2wealth
2 years, 1 month ago
Ans is YES.
upvoted 1 times
...
kilowd
1 year, 5 months ago
Answer is YES Packet capture is a computer networking term for intercepting a data packet that is crossing or moving over a specific computer network. Once a packet is captured, it is stored temporarily so that it can be analyzed. The packet is inspected to help diagnose and solve network problems and determine whether network security policies are being followed.
upvoted 3 times
...
...
dookiecloud
Highly Voted 2 years, 6 months ago
No Should use connection monitor for a period of time https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview
upvoted 13 times
erenklclar
1 year, 6 months ago
Tested in the lab. A is correct.
upvoted 1 times
...
loganharris
2 years, 5 months ago
this link supports yes. links to more information about packet capture
upvoted 4 times
...
Luke7389
1 year, 8 months ago
Connection monitor doesn't capture packets, Network Watcher does therefore A is correct https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture-overview
upvoted 3 times
...
...
Tomix
Most Recent 5 months ago
A. Yes Creating a packet capture using Azure Network Watcher is a valid solution to inspect network traffic between VM1 and VM2. Network Watcher provides network monitoring and diagnostic capabilities in Azure, including the ability to capture packets flowing between resources within a virtual network.
upvoted 1 times
...
JayLearn2022
9 months, 2 weeks ago
There are several versions of this question. The following are the possible Correct and Incorrect solutions. Correct solution: Meets the goal. -Solution: From Azure Network Watcher, you create a packet capture. Incorrect solution: Does not meet the goal. -Solution: From Azure Monitor, you create a metric on Network In and Network Out. -Solution: From Azure Network Watcher, you create a connection monitor. -Solution: From Performance Monitor, you create a Data Collector Set (DCS).
upvoted 12 times
...
zellck
9 months, 2 weeks ago
Selected Answer: A
A is the answer. https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture-overview Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactively. Other uses include gathering network statistics, gaining information on network intrusions, to debug client-server communications and much more.
upvoted 3 times
zellck
9 months, 2 weeks ago
Got this in Feb 2023 exam.
upvoted 3 times
...
...
Bigc0ck
10 months, 3 weeks ago
Still on test 01/05/2023
upvoted 6 times
...
klexams
1 year, 1 month ago
Selected Answer: B
it specifically says from VM1 to VM2. Nature of packet capture is to run the capture in a VM/machine, it does not matter where the traffic is sent to. You use filter if you want to see certain packets including where it goes, type of traffic etc etc. Yes you can use this tool for VM to VM but it is not the best tool to use it. For the purpose, I'd got with Connection Monitor.
upvoted 2 times
klexams
1 year, 1 month ago
OK I have to change it to A now - I saw this one "Packet Capture enables you to capture all traffic on a VM in your virtual network." from here https://learn.microsoft.com/en-us/azure/network-watcher/frequently-asked-questions#what-tools-does-network-watcher-provide-
upvoted 4 times
...
...
EmnCours
1 year, 3 months ago
Selected Answer: A
Answer is YES
upvoted 1 times
...
kay000001
1 year, 3 months ago
Answer is yes. This is a copy and paste straight from exam-104 text book: The Packet Capture tool allows you to capture network packets entering or leaving your virtual machines. It is a powerful tool for deep network diagnostics. You can capture all packets, or a filtered subset based on the protocol and local and remote IP addresses and ports. You can also specify the maximum packet and overall capture size, and a time limit (captures start almost immediately once configured). Packet captures are stored as a file on the VM or in an Azure storage account, in which case NSGs must allow access from the VM to Azure storage. These captures are in a standard format and can be analyzed off-line using common tools such as WireShark or Microsoft Message Analyzer. **Also, if you go into Network Watcher, you will see under diagnostic tools - Packet Capture.
upvoted 6 times
...
David1990
1 year, 4 months ago
Selected Answer: A
I will go A
upvoted 1 times
...
NotMeAnyWay
1 year, 4 months ago
Selected Answer: B
Answer B - No ‚ÄĘ **Packet Capture**: Is run on a VM to monitor the in and out flows of IP traffic. It is not used to monitor traffic BETWEEN two VMs. MS Docs: ("Packet Capture enables you to capture all traffic on a VM in your virtual network.") ‚ÄĘ **Connection Monitor**: Is used to monitor connectivity and latency between VMs over a period of time. MS Docs: ("Connection Monitor allows you to monitor connectivity and latency between a VM and another network resource.") Read Here: https://docs.microsoft.com/en-us/azure/network-watcher/frequently-asked-questions#what-tools-does-network-watcher-provide-
upvoted 3 times
NotMeAnyWay
1 year, 4 months ago
IGNORE the above, as the question states all traffic: Answer A - Yes "You need to inspect **all** the network traffic from VM1 to VM2 for a period of three hours." You will need Packet Capture. as it has an option to specify ALL protocols https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture-overview NB: (exam-topics, needs an option to delete your own comment).
upvoted 4 times
Traian
1 year, 2 months ago
It is better this way I was wondering why packet capture and not connection monitor myself.Your wrong answer and the follow up were really helpful
upvoted 1 times
...
...
...
nkhan19
1 year, 4 months ago
Selected Answer: A
Connection monitor doesn't capture packets, Network Watcher does therefore A is correct
upvoted 1 times
...
EleChie
1 year, 5 months ago
Should be A: Azure Network Watcher provides tools to monitor, diagnose, view metrics, and enable or disable logs for resources in an Azure virtual network. Capture packets to and from a VM Advanced filtering options and fine-tuned controls, such as the ability to set time and size limitations, provide versatility. The capture can be stored in Azure Storage, on the VM's disk, or both. You can then analyze the capture file using several standard network capture analysis tools. Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactivity. References: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview
upvoted 1 times
...
Lazylinux
1 year, 5 months ago
Selected Answer: A
Packet capture is correct similar to wireshark, it allows for Sources/Des IP, Ports and times allocation and can be triggered automatically via VMs alert
upvoted 3 times
...
rafacazus
1 year, 5 months ago
Selected Answer: A
It should be the packet capture as we've got in the configuration 'Time limit' field - the duration of the capture session to the file. Connection monitor has got the 'Test frequency' setting - how frequently sources will ping destinations, we're not collecting the traffic for the future inspection. The idea in the Connection monitor is to pass a test.
upvoted 2 times
...
ostych
1 year, 7 months ago
Selected Answer: A
Packet capture can be set to specified interval and connection monitor is for end-to-end monitoring specific connections. Here you have to capture all network traffic.
upvoted 2 times
...
Jayad
1 year, 8 months ago
You can use the Network Watcher for packet capturing : https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture-overview
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...