Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 1 question 7 discussion

Actual exam question from Microsoft's AZ-305

Question #: 7
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Use Azure Traffic Analytics in Azure Network Watcher to analyze the network traffic.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by Eltooth at Dec. 12, 2021, 4:33 p.m.

Comments

Submit Cancel

itmaster

Highly Voted 2 years, 10 months ago

Selected Answer: B

(Traffic Analytics) under (Network Watcher) gives you statistical data and traffic visualization like total inbound and outbound flows and the number of deployed NSGs. However, it doesn't give you information if packets are allows of denied. Check screenshot in the following reference: https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics (IP Flow Verify) under (Network Watcher) gives you option to verify if traffic is allowed or denied. Check screenshot in the following reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview Correct answer is B.

upvoted 57 times

...

Eltooth

Highly Voted 2 years, 11 months ago

Selected Answer: B

Correct answer - B

upvoted 12 times

...

SeMo0o0o0o

Most Recent 3 weeks, 3 days ago

Selected Answer: B

B is correct Use Azure Network Watcher to run IP flow verify to analyze the network traffic.

upvoted 1 times

...

ExStudent

2 months, 2 weeks ago

Correct answer - B (Based on the IP Flow docs IP flow verify in Azure Network Watcher IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

upvoted 2 times

...

sapien45

2 months, 2 weeks ago

Answer:A Read the damn docuemntation : https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics A key component of traffic analytics is NSG flow logs : Network security group (NSG) flow logs: Allow you to view information about ingress and egress IP traffic through a network security group. NSG flow logs are written in json format and show outbound and inbound flows on a per rule basis, the NIC the flow applies to, five-tuple information about the flow (source/destination IP address, source/destination port, and protocol), and if the traffic was allowed or denied.

upvoted 4 times

aleksandarivanov

2 years, 4 months ago

i don't see an NSG mentioned in the question, tho

upvoted 2 times

bigpeepee

1 year, 7 months ago

but nsg blocks packets or not? It does and it has me second guess it as b is an allowable answer.

upvoted 1 times

bigpeepee

1 year, 7 months ago

I will put my final answer as A.

upvoted 1 times

...

bigpeepee

1 year, 7 months ago

I hear you but the from what I can gather from the question is that vms and a network existed previously and now its expressroute

upvoted 1 times

...

Chenn

2 months, 2 weeks ago

A. Yes Azure Traffic Analytics, a feature of Azure Network Watcher, provides comprehensive visibility into network traffic across your Azure deployments. It can analyze network traffic to and from your Azure resources, helping you identify whether packets are being allowed or denied to your virtual machines. Therefore, using Azure Traffic Analytics in Azure Network Watcher would meet the goal of analyzing network traffic to identify connectivity issues with the virtual machines. Please note that this recommendation is based on the information provided and might need to be adjusted based on further specifics of your environment and requirements. Always test configurations in a controlled environment before deploying them in production.

upvoted 1 times

...

stonwall12

2 months, 2 weeks ago

Correct Answer - B: No, Azure Traffic Analytics (CORRECT ANSWER IS IP FLOW VERIFY) Azure Traffic Analytics provides insights into the network traffic through Azure resources. It can help you understand traffic flow patterns, identify security and networking issues, and optimize your network deployments. To analyze the network traffic in the described scenario, tools like Azure Network Watcher, specifically its IP flow verify feature, would be more appropriate. https://learn.microsoft.com/en-us/rest/api/network-watcher/network-watchers/verify-ip-flow?tabs=HTTP

upvoted 2 times

...

memo454

1 year, 3 months ago

B. IP flow verify capability enables you to specify a source and destination IPv4 address, port, protocol (TCP or UDP), and traffic direction (inbound or outbound). IP flow - latency and network issues at the VM LEVEL.

upvoted 2 times

...

flash007

1 year, 3 months ago

no ip flow verify is used to check if anything is blocked regarding traffic

upvoted 2 times

...

NotMeAnyWay

1 year, 8 months ago

Selected Answer: B

Azure Traffic Analytics is designed to help diagnose performance and connectivity issues in Azure virtual networks. It uses network flow data collected by Azure Network Watcher's flow logs, and provides insights into network activity and patterns. However, it does not provide the ability to identify whether packets are being allowed or denied to specific virtual machines.

upvoted 4 times

...

jj22222

1 year, 9 months ago

Selected Answer: B

b because it is ip flow verify

upvoted 1 times

...

zellck

1 year, 9 months ago

Selected Answer: B

B is the answer. Will require IP flow verify. https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and a remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

upvoted 3 times

...

OPT_001122

1 year, 10 months ago

Selected Answer: B

No Correct ans - Azure Network Watcher IP Flow

upvoted 1 times

...

jj22222

1 year, 10 months ago

No ; its ipflow verify

upvoted 1 times

...

PM_PM

1 year, 10 months ago

Selected Answer: A

Azure Traffic Analytics is a feature of Azure Network Watcher that allows you to monitor and analyze network traffic to identify connectivity issues. By using Azure Traffic Analytics, you can gain insight into the network traffic and identify whether packets are being allowed or denied to the virtual machines.

upvoted 1 times

...

Bummer_boy

1 year, 10 months ago

Selected Answer: B

B is the right one

upvoted 1 times

...

Gor

2 years, 6 months ago

Selected Answer: B

IP Flow Verify in Network Watcher gives you option to verify if traffic is allowed or denied.

upvoted 1 times

...

Load full discussion...