AZ-104 Certification Practice Question #286

Question

You discover that VM3 does NOT meet the technical requirements.
You need to verify whether the issue relates to the NSGs.
What should you use?

Accepted Answer

To diagnose whether network traffic to/from a virtual machine (VM3) is being blocked by a Network Security Group (NSG), you should use the IP flow verify feature of Azure Network Watcher. IP flow verify takes parameters such as source/destination IP address, port, and protocol, and checks if a packet is allowed or denied. If it is denied, it specifically identifies the NSG and the security rule that is blocking the traffic, allowing quick verification of NSG configuration issues.

More AZ-104 practice questions