Inspecting Network Traffic in Azure | AZ-104 Exam Solution

Inspecting Network Traffic from VM1 to VM2 in Azure

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You manage a virtual network named VNet1 that is hosted in the West US Azure region.

VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Performance Monitor, you create a Data Collector Set (DCS).

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B

Use the Connection Monitor feature of Azure Network Watcher.

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

Configure and manage virtual networking

No, creating a Data Collector Set (DCS) in Performance Monitor does not meet the goal of inspecting all the network traffic from VM1 to VM2 for a period of three hours.

Performance Monitor is a tool used for monitoring the performance of the system, applications, and services running on Windows servers. It can collect various performance metrics and generate reports based on them. However, it is not a tool designed for network traffic analysis.

To inspect all the network traffic from VM1 to VM2, you need a network monitoring tool that can capture and analyze network packets. One possible solution is to use Network Watcher, a native Azure service that provides network monitoring and diagnostic capabilities.

To capture network traffic between VM1 and VM2, you can create a Network Watcher Network Security Group flow log. This log captures all the network traffic flowing in and out of the network security group that contains the virtual machines. You can configure the flow log to capture traffic for a specific time period, in this case, three hours.

Once you have captured the flow log, you can analyze it using a network traffic analysis tool, such as Wireshark, to inspect the traffic between VM1 and VM2. This will allow you to identify any potential issues or anomalies in the network traffic.

Therefore, the correct answer is B. No, creating a Data Collector Set (DCS) in Performance Monitor does not meet the goal of inspecting all the network traffic from VM1 to VM2 for a period of three hours.