az-104 Practice Question 885
Exam: az-104
Domain: Monitor and troubleshoot Windows Server environments
Topic: Monitor Windows Server by using Windows Server tools and Azure services
Difficulty: medium
You have an Azure subscription named Subscription1 that has the following providers registered:\n✑ Authorization\n✑ Automation\n✑ Resources\n✑ Compute\n✑ KeyVault\n✑ Network\n✑ Storage\n✑ Billing\n✑ Web\nSubscription1 contains an Azure virtual machine named VM1 that has the following configurations:\n✑ Private IP address: 10.0.0.4 (dynamic)\n✑ Network security group (NSG): NSG1\n✑ Public IP address: None\n✑ Availability set: AVSet\n✑ Subnet: 10.0.0.0/24\n✑ Managed disks: No\n✑ Location: East US\nYou need to record all the successful and failed connection attempts to VM1.\nWhich three actions should you perform? Each correct answer presents part of the solution.\nNOTE: Each correct selection is worth one point.
Answer Options
A
Enable Azure Network Watcher in the East US Azure region.
B
Add an Azure Network Watcher connection monitor.
C
Register the MicrosoftLogAnalytics provider.
D
Create an Azure Storage account.
E
Register the Microsoft.Insights resource provider.
F
Enable Azure Network Watcher flow logs.
Correct Answer
A: Enable Azure Network Watcher in the East US Azure region.
E: Register the Microsoft.Insights resource provider.
F: Enable Azure Network Watcher flow logs.
Explanation
You can log network traffic that flows through an NSG with Network Watcher's NSG flow log capability.\n✑ In the Azure portal, enable Network Watcher\n✑ Register Insights provider. NSG flow logging requires the Microsoft.Insights provider.\n✑ Enable NSG flow log. NSG flow log data is written to an Azure Storage account, Subscription1 has storage.