Exam AZ-720 topic 5 question 47 discussion

C. Enable FlowLog1 in a network security group associated with the network interface of VM1. When FastPath is enabled, traffic from on-premises networks bypasses the Azure gateway and goes directly to VMs in your VNet. This means that flow logs on the gateway will not capture this traffic, which is why you are not seeing outbound traffic in the flow logs for the gateway. In order to capture traffic information for VM1 (including the issues users are experiencing when connecting to VM1 from on-premises), you need to enable flow logging on the network security group (NSG) associated with VM1's network interface. This will capture traffic information for VM1, including any inbound and outbound traffic.

From what I read from another site: When FastPath is enabled on an ExpressRoute gateway, network traffic between your on-premises network and your virtual network bypasses the gateway and goes directly to virtual machines in the virtual network. Therefore, if you want to capture outbound flow traffic from VM1, you need to enable flow logging on an NSG associated with the subnet of VM1.

A. Enable the public endpoint for the FlowLog1 storage account. The issue here is that FlowLog1 is not reporting outbound flow traffic, which means that the logs are not being sent to the storage account. To resolve this, we need to ensure that the storage account can be accessed from the virtual network associated with the NSG. To achieve this, we can enable the public endpoint for the storage account, which allows traffic to be sent to the storage account over the public internet. Once this is done, FlowLog1 should start reporting outbound flow traffic.

I think C is incorrect. Because NSG cannot be attached with NIC.