exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 6 question 60 discussion

Actual exam question from Microsoft's AZ-104
Question #: 37
Topic #: 6
[All AZ-104 Questions]

You have an Azure subscription that contains multiple virtual machines in the West US Azure region.

You need to use Traffic Analytics in Azure Network Watcher to monitor virtual machine traffic.

Which two resources should you create? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A. a Log Analytics workspace
  • B. an Azure Monitor workbook
  • C. a storage account
  • D. a Microsoft Sentinel workspace
  • E. a Data Collection Rule (DCR) in Azure Monitor
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
taki_ananasek
Highly Voted 1 year, 1 month ago
Selected Answer: AE
To use Traffic Analytics in Azure Network Watcher to monitor virtual machine traffic, you need to create the following resources: A. A Log Analytics workspace - Traffic Analytics requires a Log Analytics workspace to store and analyze network traffic data. E. A Data Collection Rule (DCR) in Azure Monitor - You need to create a Data Collection Rule within Azure Monitor to specify what data should be collected and sent to the Log Analytics workspace, including the network traffic data for Traffic Analytics. So, options A and E are the correct answers.
upvoted 28 times
CheMetto
4 months, 1 week ago
I'll go with this. For those one who think about storage account, remember azure subscription has already VM -> so it has already storage account
upvoted 2 times
...
...
Fr3ggel
Highly Voted 1 year, 1 month ago
Selected Answer: AC
To use Traffic Analytics in Azure Network Watcher, you need to create a Log Analytics workspace and a storage account. A Log Analytics workspace is a cloud-based repository that collects and stores data from various sources, such as NSG flow logs. A storage account is a container that provides a unique namespace to store and access your data objects in Azure Storage. You need to enable NSG flow logs and configure them to send data to both the Log Analytics workspace and the storage account. Traffic Analytics analyzes the NSG flow logs and provides insights into traffic flow in your Azure cloud.
upvoted 10 times
...
samhouston
Most Recent 18 hours, 47 minutes ago
Selected Answer: AC
Traffic Analytics does not use DCRs; it depends on NSG Flow Logs and Log Analytics. Storage Account: • NSG Flow Logs are initially sent to a storage account, where they are stored before being processed by Traffic Analytics. • Why it’s required: The storage account acts as a temporary repository for the flow logs before they are sent to the Log Analytics workspace. Correct Answer A & C
upvoted 1 times
...
Josh219
1 week, 1 day ago
Selected Answer: AC
For setting up Traffic Analytics in Azure Network Watcher specifically, a DCR is not a required resource. (Note: in my previous comment I said DCR is not a resource, I meant its not essential resource) The essential resources you need are: A Log Analytics workspace: To store and analyze the traffic data. A storage account: To store the flow logs generated by Network Watcher.
upvoted 1 times
...
Josh219
1 week, 1 day ago
Selected Answer: AC
Correct is A and C and not E. Read question carefully it asks for two Resources and DCR is not resource
upvoted 1 times
...
SeMo0o0o0o
2 months ago
Selected Answer: AC
A & C are correct a storage account is required to hold the logs before they are sent to the Log Analytics workspace.
upvoted 1 times
Dankho
1 month, 2 weeks ago
Bulls*it, the Log Analytics Workspace does that...
upvoted 1 times
...
...
codered4409
2 months ago
Answer - A & E Check the below link from MS where prerequisites are Log Analytics Workspace and DCR.
upvoted 1 times
...
Debugs_Bunny
2 months, 3 weeks ago
Selected Answer: AC
To use Traffic Analytics in Azure Network Watcher to monitor virtual machine traffic, you need the following two resources: A. a Log Analytics workspace Traffic Analytics uses a Log Analytics workspace to store and analyze network traffic data. NSG flow logs are sent to the Log Analytics workspace, where Traffic Analytics processes them to provide insights about network traffic patterns, potential security threats, and traffic flows. C. a storage account NSG flow logs must be stored in a storage account before being processed and sent to the Log Analytics workspace. The storage account acts as an intermediary where the flow logs are initially captured and stored.
upvoted 2 times
Debugs_Bunny
2 months, 3 weeks ago
Explanation of other options: B. an Azure Monitor workbook: This is used for visualizing data from Log Analytics but is not required for Traffic Analytics configuration. D. a Microsoft Sentinel workspace: Microsoft Sentinel is used for security information and event management (SIEM), but it's not necessary for configuring Traffic Analytics. E. a Data Collection Rule (DCR) in Azure Monitor: DCR is used for custom log data collection and does not play a role in setting up Traffic Analytics.
upvoted 1 times
...
...
CubicTeach
3 months, 3 weeks ago
Selected Answer: AC
Data collection rule and data collection endpoint resources are created and managed by traffic analytics. If you perform any operation on these resources, traffic analytics may not function as expected. https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites
upvoted 3 times
DJHASH786
3 months, 2 weeks ago
Hey, when are you planning to take the exam ??
upvoted 1 times
...
...
Jedi_sg2000
4 months, 3 weeks ago
https://www.examtopics.com/discussions/microsoft/view/81260-exam-az-700-topic-4-question-4-discussion/
upvoted 3 times
...
maki999
6 months, 1 week ago
Selected Answer: AC
As per GPT4 To set up Traffic Analytics in Azure Network Watcher, you need to ensure that flow logs from your Network Security Groups (NSGs) are collected and stored appropriately. Traffic Analytics then processes these logs to provide insights into your network traffic. A. a Log Analytics workspace: Traffic Analytics requires a Log Analytics workspace to analyze and visualize the network traffic data. This workspace is where the logs are sent and processed. C. a storage account: NSG flow logs need a storage account to store raw flow log data. Traffic Analytics reads the flow logs from this storage account and processes them. Thus, the correct answers are: A. a Log Analytics workspace C. a storage account
upvoted 3 times
suddin1
6 months, 1 week ago
how do you collect data to store in storage without a collection rule??
upvoted 3 times
egomezcaro
4 months, 4 weeks ago
The NSG flow logs are directly configured to be stored in a storage account, and Traffic Analytics processes these logs without the need for an additional DCR. The process of collecting and storing the NSG flow logs is managed through the Network Watcher settings and the specified storage account
upvoted 1 times
...
5c3d677
5 months, 3 weeks ago
i copied your comment and asked a follow up question to chat gpt, and GPT changed its answer to AE lol. Gpt is disappointing.
upvoted 3 times
...
...
...
WeepingMaplte
6 months, 1 week ago
Selected Answer: AE
https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites:~:text=required%20when%20using-,traffic%20analytics,-to%20analyze%20virtual
upvoted 1 times
damnboy
4 months, 1 week ago
Your link contradicts your vote. DCR are managed by traffic analytics, if you tamper with them it could result it unexpected results. So option E cannot be correct.
upvoted 1 times
...
...
Mysystemad
8 months ago
The two resources you should create are: A. a Log Analytics workspace: Traffic Analytics is a cloud-based solution that provides visibility into user and application activity in the cloud. It analyzes the Network Security Group Flow Logs across Azure regions and populates the insights into a Log Analytics workspace. E. a Data Collection Rule (DCR) in Azure Monitor: A Data Collection Rule defines what data to collect from your Azure and non-Azure resources. It can be used to collect Network Security Group Flow Logs, which are then analyzed by Traffic Analytics. The other options listed are not directly related to the setup of Traffic Analytics in Azure Network Watcher. For example, an Azure Monitor workbook (Option B) is used for data visualization, a storage account (Option C) is used for storing data, and a Microsoft Sentinel workspace (Option D) is used for security information and event management
upvoted 1 times
...
Amir1909
8 months, 2 weeks ago
A and E is right
upvoted 1 times
...
Watcharin_start
9 months, 1 week ago
Selected Answer: AE
Caution Data collection rule and data collection endpoint resources are created and managed by traffic analytics. If you perform any operation on these resources, traffic analytics may not function as expected. So, I'm vote AE Ref: https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites
upvoted 1 times
...
_Paul_
10 months, 2 weeks ago
Selected Answer: AC
I think it's A and C: https://techgenix.com/network-watcher-traffic-analytics/
upvoted 3 times
...
Z_MU
10 months, 2 weeks ago
correct me if I am wrong, for people that chooses A and C, where is the storage account mentioned in this reference if that is the correct reference for this question? https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites
upvoted 1 times
mkhlszf
7 months ago
The flow logs needs it, so its a dependency from them to use the Traffic Analytics: Traffic analytics is a cloud-based solution that provides visibility into user and application activity in your cloud networks. Specifically, traffic analytics analyzes Azure Network Watcher flow logs to provide insights into traffic flow in your Azure cloud. https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics ...Flow data from virtual network flow logs is sent to Azure Storage. From there, you can access the data and export it to any visualization tool, security information and event management (SIEM) solution, or intrusion detection system (IDS). https://learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-overview
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago