Microsoft Azure Administrator — Question 49

You have an Azure subscription named Subscription1 that has the following providers registered:
✑ Authorization
✑ Automation
✑ Resources
✑ Compute
✑ KeyVault
✑ Network
✑ Storage
✑ Billing
✑ Web
Subscription1 contains an Azure virtual machine named VM1 that has the following configurations:
✑ Private IP address: 10.0.0.4 (dynamic)
✑ Network security group (NSG): NSG1
✑ Public IP address: None
✑ Availability set: AVSet
✑ Subnet: 10.0.0.0/24
✑ Managed disks: No
✑ Location: East US
You need to record all the successful and failed connection attempts to VM1.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. Enable Azure Network Watcher in the East US Azure region.
• B. Add an Azure Network Watcher connection monitor.
• C. Register the MicrosoftLogAnalytics provider.
• D. Create an Azure Storage account.
• E. Register the Microsoft.Insights resource provider.
• F. Enable Azure Network Watcher flow logs.

Correct answer: D, E, F

Explanation

The correct answers D, E, and F are necessary to ensure connection attempts are logged. Creating an Azure Storage account (D) is essential for storing the logs, while registering the Microsoft.Insights resource provider (E) allows for monitoring capabilities. Enabling Azure Network Watcher flow logs (F) specifically sets up the logging of connection attempts. Options A, B, and C do not directly contribute to recording the connection attempts to VM1.