Exam AZ-104 topic 6 question 60 discussion

To use Traffic Analytics in Azure Network Watcher to monitor virtual machine traffic, you need to create the following resources: A. A Log Analytics workspace - Traffic Analytics requires a Log Analytics workspace to store and analyze network traffic data. E. A Data Collection Rule (DCR) in Azure Monitor - You need to create a Data Collection Rule within Azure Monitor to specify what data should be collected and sent to the Log Analytics workspace, including the network traffic data for Traffic Analytics. So, options A and E are the correct answers.

To use Traffic Analytics in Azure Network Watcher, you need to create a Log Analytics workspace and a storage account. A Log Analytics workspace is a cloud-based repository that collects and stores data from various sources, such as NSG flow logs. A storage account is a container that provides a unique namespace to store and access your data objects in Azure Storage. You need to enable NSG flow logs and configure them to send data to both the Log Analytics workspace and the storage account. Traffic Analytics analyzes the NSG flow logs and provides insights into traffic flow in your Azure cloud.

A and E. Why not C, because Storage accounts are used for raw log storage, not for Traffic Analytics.

chatgpt: Log Analytics Workspace Purpose: Traffic Analytics uses a Log Analytics workspace to ingest, store, and analyze the flow log data generated by Network Security Groups (NSGs). Configuration: Ensure that the workspace is in the same region or linked to the region where the NSGs are deployed. 2. Storage Account Purpose: NSG flow logs must first be stored in a storage account. Traffic Analytics processes these logs from the storage account and sends the data to the Log Analytics workspace.

Traffic Analytics does not use DCRs; it depends on NSG Flow Logs and Log Analytics. Storage Account: • NSG Flow Logs are initially sent to a storage account, where they are stored before being processed by Traffic Analytics. • Why it’s required: The storage account acts as a temporary repository for the flow logs before they are sent to the Log Analytics workspace. Correct Answer A & C

For setting up Traffic Analytics in Azure Network Watcher specifically, a DCR is not a required resource. (Note: in my previous comment I said DCR is not a resource, I meant its not essential resource) The essential resources you need are: A Log Analytics workspace: To store and analyze the traffic data. A storage account: To store the flow logs generated by Network Watcher.

Correct is A and C and not E. Read question carefully it asks for two Resources and DCR is not resource

A & C are correct a storage account is required to hold the logs before they are sent to the Log Analytics workspace.

Answer - A & E Check the below link from MS where prerequisites are Log Analytics Workspace and DCR.

To use Traffic Analytics in Azure Network Watcher to monitor virtual machine traffic, you need the following two resources: A. a Log Analytics workspace Traffic Analytics uses a Log Analytics workspace to store and analyze network traffic data. NSG flow logs are sent to the Log Analytics workspace, where Traffic Analytics processes them to provide insights about network traffic patterns, potential security threats, and traffic flows. C. a storage account NSG flow logs must be stored in a storage account before being processed and sent to the Log Analytics workspace. The storage account acts as an intermediary where the flow logs are initially captured and stored.

Data collection rule and data collection endpoint resources are created and managed by traffic analytics. If you perform any operation on these resources, traffic analytics may not function as expected. https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites

https://www.examtopics.com/discussions/microsoft/view/81260-exam-az-700-topic-4-question-4-discussion/

As per GPT4 To set up Traffic Analytics in Azure Network Watcher, you need to ensure that flow logs from your Network Security Groups (NSGs) are collected and stored appropriately. Traffic Analytics then processes these logs to provide insights into your network traffic. A. a Log Analytics workspace: Traffic Analytics requires a Log Analytics workspace to analyze and visualize the network traffic data. This workspace is where the logs are sent and processed. C. a storage account: NSG flow logs need a storage account to store raw flow log data. Traffic Analytics reads the flow logs from this storage account and processes them. Thus, the correct answers are: A. a Log Analytics workspace C. a storage account

https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites:~:text=required%20when%20using-,traffic%20analytics,-to%20analyze%20virtual

The two resources you should create are: A. a Log Analytics workspace: Traffic Analytics is a cloud-based solution that provides visibility into user and application activity in the cloud. It analyzes the Network Security Group Flow Logs across Azure regions and populates the insights into a Log Analytics workspace. E. a Data Collection Rule (DCR) in Azure Monitor: A Data Collection Rule defines what data to collect from your Azure and non-Azure resources. It can be used to collect Network Security Group Flow Logs, which are then analyzed by Traffic Analytics. The other options listed are not directly related to the setup of Traffic Analytics in Azure Network Watcher. For example, an Azure Monitor workbook (Option B) is used for data visualization, a storage account (Option C) is used for storing data, and a Microsoft Sentinel workspace (Option D) is used for security information and event management

A and E is right

Caution Data collection rule and data collection endpoint resources are created and managed by traffic analytics. If you perform any operation on these resources, traffic analytics may not function as expected. So, I'm vote AE Ref: https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites