Azure Network Monitoring Solution | MAC Address Collection | Exam AZ-301

Azure Network Monitoring Solution

Question

You manage a solution in Azure.

You must collect usage data including MAC addresses from all devices on the network.

You need to recommend a monitoring solution.

What should you recommend?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

B

A network security group (NSG) includes rules that allow or deny traffic to a virtual network subnet, network interface, or both. When you enable diagnostic logging for an NSG, you can log the following categories of information:

Event: Entries are logged for which NSG rules are applied to VMs, based on MAC address. The status for these rules is collected every 60 seconds.

Rule counter: Contains entries for how many times each NSG rule is applied to deny or allow traffic.

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-nsg-manage-log

Based on the given scenario, the requirement is to collect usage data, including MAC addresses from all devices on the network. Therefore, the recommended monitoring solution should have capabilities to monitor network traffic and capture MAC addresses.

Let's go through the given options to see which one is the best fit:

A. Activity Log Analytics: This service collects and analyzes data from Azure activity logs. It can be used to monitor events and operations that occur within an Azure subscription. However, it does not collect network traffic or MAC addresses. Therefore, this option is not suitable for the given scenario.

B. Azure Network Security Group Analytics: This service analyzes network traffic flowing through Azure Network Security Groups (NSGs). It provides insights into traffic flow patterns and security risks. However, it does not capture MAC addresses. Therefore, this option is not suitable for the given scenario.

C. Network Performance Monitor: This service provides network monitoring capabilities for on-premises, cloud, and hybrid networks. It can capture network traffic and provide insights into network performance, including metrics such as latency, packet loss, and throughput. However, it does not capture MAC addresses. Therefore, this option is not suitable for the given scenario.

D. Azure Application Gateway Analytics: This service provides analytics and insights into Azure Application Gateway, a web traffic load balancer that enables you to manage web traffic to your web applications. It does not capture MAC addresses or network traffic from devices on the network. Therefore, this option is not suitable for the given scenario.

E. Azure Wire Data: This service captures network traffic and telemetry from Azure virtual machines, Azure Kubernetes Service (AKS) clusters, and Azure Service Fabric clusters. It can be used to monitor network traffic and capture MAC addresses. Therefore, this option is the best fit for the given scenario.

In conclusion, the recommended monitoring solution for the given scenario is Azure Wire Data.