Exam AZ-103 topic 16 question 61 discussion

Its wrong answer Answer should be DBE as per Microsoft documentation D - Enable Azure Network Watcher in the East US Azure region. B. Register the Microsoft.Insights resource provider. E. Enable Azure Network Watcher flow logs. Refer :- https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

I guess that the correct solution should be 4, ABDE, as it can't be, I guess that we have to choose between understand that the storage has been already there, or that the Insight provider has been already registered. Checking the documentation it takes as the storage it's already there, so which the info that we have I would consider that the good answer is BDE. https://docs.microsoft.com/en-us/learn/modules/secure-aad-users-with-mfa/4-exercise-mfa

A. Create an Azure Storage account: This is necessary to store the logs generated by Azure Network Watcher. You can use the storage account to store the connection monitor logs as well as flow logs. B. Register the Microsoft.Insights resource provider: This is required for creating Azure Network Watcher connection monitors. C. Add an Azure Network Watcher connection monitor: This will enable you to monitor the connections to VM1 and record successful and failed connection attempts. You can configure the connection monitor to send the logs to the storage account created in step A.

Correct Answer: ABE A network security group (NSG) enables you to filter inbound traffic to, and outbound traffic from, a virtual machine (VM). You can log network traffic that flows through an NSG with Network Watcher's NSG flow log capability. 1. Create a VM with a network security group - Already available 2. Enable Network Watcher - Since 2018, Network Watcher has been enabled by default on any subscription with a Virtual Network 3. Register the Microsoft.Insights provider 4. Configure Azure Storage account. 5. Enable a traffic flow log for an NSG, using Network Watcher's NSG flow log capability 6. Download logged data 7. View logged data To record the successful and failed connection requests, we should use Azure Network Watcher flow logs. The Network Watcher is already enabled in the region, and we can utilize the Network Watcher NSG's flow log functionality. For that, we need to register the microsoft.insights resource provider and create a storage account for storing the flow logs. Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

BAE https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

Answers: B. Register the Microsoft.Insights resource provider. D. Enable Azure Network Watcher in the East US Azure region. E. Enable Azure Network Watcher flow logs.

https://docs.microsoft.com/en-us/azure/network-watcher/connection-monitor-overview correct answer is here

it dropped in my exam today 28/10, but I could only choose one alternative, I chose B, and I passed.

when you create a vnet, network watcher is automatically enabled for that region. so answer ABE

DBE - correct

why do we need one more storage account?! we already have one.

"ABD" is correct.

Answer is DBE

BDE are correct answer . First step is Create a VM not storage account https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

ABD is the correct answer. https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-overview

Create an Azure Storage account. Register the Microsoft.Insights resource provider. Enable Azure Network Watcher flow logs. Network Watcher automatically enabled in each region hence no need to enable it, but we need to enable flow logs for sure.

As per my knowledge answer should B, D , E