Azure Network Watcher: Analyzing Network Traffic for Virtual Machines | Exam AZ-305

Azure Network Watcher: Analyzing Network Traffic

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is being deployed and configured for on-premises to Azure connectivity.

Several virtual machines exhibit network connectivity issues.

You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.

Solution: Use Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B

Instead use Azure Network Watcher IP Flow Verify, which allows you to detect traffic filtering issues at a VM level.

Note: IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

The proposed solution, using Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic, meets the goal of analyzing the network traffic to identify whether packets are being allowed or denied to the virtual machines.

Azure Network Watcher is a network monitoring and diagnostic service that provides tools to monitor, diagnose, and gain insights into Azure virtual networks. One of the tools provided by Azure Network Watcher is Traffic Analytics, which analyzes and visualizes network traffic flow in Azure, including virtual machines.

By using Traffic Analytics in Azure Network Watcher, administrators can identify network security threats, troubleshoot network connectivity issues, and gain insights into network behavior. Traffic Analytics allows administrators to visualize network traffic flows and apply filters to identify network traffic patterns.

In this scenario, the proposed solution of using Azure Traffic Analytics in Azure Network Watcher to analyze network traffic is an appropriate solution to identify whether packets are being allowed or denied to the virtual machines. With Traffic Analytics, administrators can analyze the network traffic flow between on-premises and Azure virtual machines, identify the source of the network connectivity issues, and take corrective actions. Therefore, the correct answer is A. Yes.