Exam AZ-104 topic 6 question 57 discussion

NSG flow logs are a feature of Azure Network Watcher that allows logging of information about IP traffic flowing through a network security group. This data can be used by Traffic Analytics to analyze network traffic in your environment. By enabling NSG flow logs for NSG1, the Network Security Group associated with VM1, you would be able to monitor the traffic of VM1 using Traffic Analytics https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics https://learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-tutorial

NSG Flow logs for NSG1 https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics

B is correct

6/13/24 on exam

B is correct

Option C: Diagnostic settings for NSG Traffic Analytics relies on NSG flow logs for its data source. To enable Traffic Analytics for VM1, you need to configure diagnostic settings for NSG1, as it is the NSG associated with VM1's NIC. This allows NSG flow logs to be sent to a storage account, and Traffic Analytics can then process and analyze these logs.

To monitor VM1 traffic using Traffic Analytics, you need to have NSG flow logs enabled for the network security group that is associated with the virtual machine's network interface. Traffic Analytics is powered by NSG flow logs, which record information about IP traffic flowing through an NSG. Therefore, the correct setting to configure is: B. NSG flow logs for NSG1