Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Install and configure the Azure Monitoring agent and the Dependency Agent on all the virtual machines. Use VM insights in Azure Monitor to analyze the network traffic.
Does this meet the goal?
- A. Yes
- B. No Correct
Explanation
The solution does not meet the goal. The Azure Monitor agent and the Dependency agent enable VM insights, which shows performance data and a map of processes and their network connections, but it does not evaluate network security rules to determine whether packets are allowed or denied. To identify whether packets are being allowed or denied to the virtual machines, use IP flow verify in Azure Network Watcher.
