AZ-104 Certification Practice Question #164

Question

You have an Azure subscription named Subscription1 that has the following providers registered:
✑ Authorization
✑ Automation
✑ Resources
✑ Compute
✑ KeyVault
✑ Network
✑ Storage
✑ Billing
✑ Web
Subscription1 contains an Azure virtual machine named VM1 that has the following configurations:
✑ Private IP address: 10.0.0.4 (dynamic)
✑ Network security group (NSG): NSG1
✑ Public IP address: None
✑ Availability set: AVSet
✑ Subnet: 10.0.0.0/24
✑ Managed disks: No
✑ Location: East US
You need to record all the successful and failed connection attempts to VM1.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

To record successful and failed connection attempts to an Azure virtual machine (VM1), you must enable Network Security Group (NSG) flow logs for the associated NSG (NSG1). The prerequisites to configure NSG flow logs are: registering the `Microsoft.Insights` resource provider (E), creating a Standard Azure Storage account in the same region as the NSG to store the flow log data (D), and enabling the NSG flow logs within Network Watcher (F). Manually enabling Network Watcher (A) is not required because it is enabled automatically by default when a VNet is created. Therefore, actions D, E, and F are the correct choices.

More AZ-104 practice questions