Exam AZ-104 topic 12 question 1 discussion

correct use Test-AzNetworkWatcherIPFlow to get NSG security rule which blocked traffic + Get-AzEffectiveNetworkSecurityGroup to get details of NSG rules https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-powershell

I passed my exam yesterday 29/03/2024 with a score of 91x! And here is my feedback to you: about 85% of the questions are from here ! and I remember one of the not included questions to be like this: Three VNETs (one in azure china , one in azure government, one in azure global) and you have three peering options and you have to choose whether it is true or false for the peering to be established. overall I am pretty satisfied with ET and I learned a lot from the discussions; if only those who aren't sure about their answers stop posting them, things would be far better! in the end I hope you guys succeed, best of lucks !

intuitively, if you see the keyword NSG within network watcher, seek for IP flow verify

That was a whole lot of reading, to answer a question that you did not need any information from the Case Study to answer. Thanks MS!

To verify whether the issue with VM3 relates to the NSGs, you should use IP flow verify in Azure Network Watcher. This feature allows you to test the traffic flow to and from a virtual machine by specifying the source and destination IP addresses, port numbers, and protocol. It can also show you whether traffic is allowed or denied by network security groups. By using this tool, you can identify any issues with NSGs that may be preventing VM3 from establishing outbound connections over TCP port 8080 to the application servers in the Montreal office. Therefore, the correct answer is E.

E. IP flow verify in Azure Network Watcher should be used to verify whether the issue with VM3 relates to the NSGs.

IMO answer is E "IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned" https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

why some much text for a simple question

this question was on 16/03/2022 and answered what mentioned in the answer section

this question was on 16/03/2022 and answered what mentioned in the answer section

on exam 13/3/2022

take exam on next monday, pray for me~~!!

IpFlow can check port traffic

in exam today! October 16, 2021