Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic.
Does this meet the goal?
- A. Yes
- B. No Correct
Explanation
Traffic Analytics in Network Watcher processes NSG or virtual network flow logs in aggregated intervals (every 10 or 60 minutes) to visualize traffic patterns, top talkers and blocked or malicious flows across the network. It is a reporting and analytics tool, not a diagnostic that tests whether a specific packet to or from a virtual machine is allowed or denied and which security rule decided it. To identify whether packets are being allowed or denied to the virtual machines, use IP flow verify in Azure Network Watcher. The solution does not meet the goal.
