AZ-104 Question 264
Select 2You manage several Azure VMs in East US, and users report intermittent connectivity problems when these VMs attempt to reach a web service hosted in a different region. You decide to use Azure Network Watcher’s Connection Monitor to investigate and track the connection issues. Which two actions are required to configure Connection Monitor and accurately verify end-to-end traffic flow from your VMs to the external service?
- A
Enable Network Watcher in the Azure regions where you want to monitor connectivity.
- B
Deploy a Network Security Group with a custom inbound rule allowing traffic from the external service.
- C
Configure Connection Monitor using the Azure VMs as source endpoints and the web service as the destination endpoint.
- D
Enable Traffic Analytics in Azure Network Watcher for detailed packet capture of the external service.
Show answer and explanation
Correct answers: A, C
Explanation
Connection Monitor operates within Network Watcher and relies on specifying the correct source and destination endpoints to test connectivity paths. Network Security Groups and Traffic Analytics, while useful for security and broader analysis, are not direct prerequisites for setting up or running Connection Monitor.
- A. Correct.
You must enable Network Watcher in the relevant regions so that Connection Monitor can track and troubleshoot connectivity.
- B. Incorrect.
While Network Security Groups control traffic, adding or modifying NSG rules is not a mandatory step to implement Connection Monitor itself.
- C. Correct.
Connection Monitor requires specifying both the source (your VMs) and the destination (the external web service) for accurate path testing.
- D. Incorrect.
Traffic Analytics offers insights into traffic patterns using flow logs, but enabling it is not a required step for Connection Monitor to function.