Exam AZ-104 topic 5 question 74 discussion

No. We need to inspect all the network traffic "from" VM1 "to" VM2 and not between the 2 VMs. Even if we were using Connection monitor, this one would inspect only network traffic over a specific port. And for a period of 3 hours, packet capture session time limit default value is 18000 seconds or 5 hours.

There are several versions of this question. The following are the possible Correct and Incorrect solutions. Correct solution: Meets the goal. -Solution: From Azure Network Watcher, you create a packet capture. Incorrect solution: Does not meet the goal. -Solution: From Azure Monitor, you create a metric on Network In and Network Out. -Solution: From Azure Network Watcher, you create a connection monitor. -Solution: From Performance Monitor, you create a Data Collector Set (DCS).

B is correct From Azure Network Watcher, you create a packet capture.

how and why answer is'nt just do shit in network watcher? wtf is this primordial setting of capture packets bs?

B. No Creating a connection monitor in Azure Network Watcher will not meet the goal of inspecting all the network traffic from VM1 to VM2 for a period of three hours. Connection monitors in Azure Network Watcher are used to monitor the connectivity between two points in a network, but they do not capture and inspect the actual network traffic. To inspect network traffic between VM1 and VM2, you would need to use a network capture tool or software that can capture and analyze network packets. Azure Network Watcher itself does not have the capability to capture network traffic.

No. Connection monitor won't provide the same level of detail as packet capture will; "Connection Monitor provides unified, end-to-end connection monitoring in Azure Network Watcher. The Connection Monitor feature supports hybrid and Azure cloud deployments. Network Watcher provides tools to monitor, diagnose, and view connectivity-related metrics for your Azure deployments." https://learn.microsoft.com/en-us/azure/network-watcher/connection-monitor-overview

B is the answer. https://learn.microsoft.com/en-us/azure/network-watcher/connection-monitor-overview Connection Monitor provides unified, end-to-end connection monitoring in Azure Network Watcher. The Connection Monitor feature supports hybrid and Azure cloud deployments. Network Watcher provides tools to monitor, diagnose, and view connectivity-related metrics for your Azure deployments. https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture-overview Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactively. Other uses include gathering network statistics, gaining information on network intrusions, to debug client-server communications and much more.

Yes Here are some points to consider when deciding between creating a connection monitor or a packet capture: Connection monitors: Provide ongoing monitoring of connectivity between two resources Can alert you if connectivity is lost or degraded Do not capture the actual packets, so you cannot view the contents of the traffic Packet captures: Allow you to view the contents of the traffic Can be useful for analyzing specific issues or problems Require you to manually start and stop the capture

still on test

"Packet Capture enables you to capture all traffic on a VM in your virtual network." https://learn.microsoft.com/en-us/azure/network-watcher/frequently-asked-questions#what-tools-does-network-watcher-provide-

this was on exam 03oct2022 , I scored 870 and answered as Examtopics answer

B. No - With Packet capture, You can Set a time constraint on the packet capture session. The default value is 18000 seconds or 5 hours.

Answer A - Yes • **Packet Capture**: Is run on a VM to monitor the in and out flows of IP traffic. It is not used to monitor traffic BETWEEN two VMs. MS Docs: ("Packet Capture enables you to capture all traffic on a VM in your virtual network.") • **Connection Monitor**: Is used to monitor connectivity and latency between VMs over a period of time. MS Docs: ("Connection Monitor allows you to monitor connectivity and latency between a VM and another network resource.") Read Here: https://docs.microsoft.com/en-us/azure/network-watcher/frequently-asked-questions#what-tools-does-network-watcher-provide-

A connection is not traffic its a to a specific port not all

Monitor communication between a virtual machine and an endpoint The connection monitor capability monitors communication at a regular interval and informs you of reachability, latency, and network topology changes between the VM and the endpoint. Connection monitor also provides the minimum, average, and maximum latency observed over time. After learning the latency for a connection, you may find that you're able to decrease the latency by moving your Azure resources to different Azure regions. Capture packets to and from a VM Advanced filtering options and fine-tuned controls, such as the ability to set time and size limitations, provide versatility. The capture can be stored in Azure Storage, on the VM's disk, or both. You can then analyze the capture file using several standard network capture analysis tools. Packet capture helps to diagnose network anomalies both reactively and proactively. Other uses include gathering network statistics, gaining information on network intrusions, to debug client-server communications and much more.

I would go with Yes based on the following guide from Microsoft: https://docs.microsoft.com/en-us/azure/network-watcher/connection-monitor

The answer should be NO