Network Traffic Analysis for VMs with Azure Traffic Analytics Solution | Exam AZ-301

Analyze Network Traffic to Identify VM Connectivity Issues

Question

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.

Several VMs are exhibiting network connectivity issues.

You need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.

Solution: Use the Azure traffic analytics solution in Azure Log Analytics to analyze the network traffic.

Does the solution meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B

Instead use Azure Network Watcher to run IP flow verify to analyze the network traffic.

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

Yes, the proposed solution meets the goal of analyzing the network traffic to determine whether packets are being allowed or denied to the VMs.

Azure Traffic Analytics is a solution in Azure Log Analytics that analyzes network traffic flowing through Azure network security group (NSG) flow logs. The solution can help identify security threats, troubleshoot connectivity issues, and optimize network performance.

In this scenario, since the company has already deployed Azure ExpressRoute for on-premises to Azure connectivity, it is possible to use Azure Traffic Analytics to analyze the network traffic flowing through the NSGs associated with the VMs. By doing so, it will be possible to determine whether packets are being allowed or denied to the VMs, which will help identify the cause of the network connectivity issues.

Therefore, the proposed solution of using Azure Traffic Analytics in Azure Log Analytics to analyze the network traffic is a valid and appropriate solution to meet the stated goal.