AZ-801: Configuring Windows Server Hybrid Advanced Services

By Microsoft · Question Mode

QuestionQ9

Monitor and troubleshoot Windows Server environments

You have an Azure subscription containing two Windows Server virtual machines named VM1 and VM2.

You need to use Azure Network Watcher to meet these requirements:

  • Identify the security rules that stop network traffic from reaching VM1.
  • Identify the source region of packets sent to VM2.

What should you use for each requirement?

Select
Identify security rules that prevent network traffic from reaching VM1:
Identify the source region of packets sent to VM2:
Explanation

IP flow verify simulates a packet against all applicable NSG (and Azure Virtual Network Manager) rules and returns Allow/Deny plus the exact name of the security rule responsible, so it directly identifies which rule stops traffic from reaching VM1. To learn the source region of packets, you need Traffic Analytics, which processes NSG flow logs and visualizes traffic by geography, showing the source country/region of flows to VM2. Packet capture only records raw packet payloads and does not resolve or aggregate a geographic source region, so the auto key's Packet capture is wrong for the second requirement. Next hop and Connection troubleshoot diagnose routing/connectivity, not rule blocking or geo-source.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!