AZ-700 Question 63
Single answerA company has multiple Azure Virtual Machines spread across different subnets and needs to detect abnormal traffic patterns, measure latency between subnets in near real-time, and gather all metrics in one central location for analysis and troubleshooting. Which approach should you implement to meet these requirements?
- A
Enable Network Security Group (NSG) flow logs in Network Watcher, then store and manually analyze them in an Azure Storage account
- B
Leverage Azure Monitor for Containers by installing a containerized agent on each VM to track cross-subnet transport metrics
- C
Configure Connection Monitor in Azure Network Watcher to collect near real-time performance insights across subnets and centralize data in Log Analytics
- D
Deploy Azure Traffic Manager with a Weighted routing policy to capture and analyze traffic flows between subnets
Show answer and explanation
Correct answer: C
Explanation
To perform near real-time monitoring of network performance and detect potential anomalies across multiple subnets in Azure, you should use Connection Monitor from Azure Network Watcher. Configuring Connection Monitor allows you to track and report on metrics like latency and connectivity issues, and you can integrate these metrics with Azure Log Analytics for centralized storage, alerts, and advanced analytics. See the official Azure Network Watcher documentation (https://docs.microsoft.com/azure/network-watcher/network-watcher-monitoring-overview) for details on configuring Connection Monitor.
- A. Incorrect.
Although NSG flow logs can help you track traffic, they are not optimized for near real-time latency monitoring or automated analytics. They primarily provide flow-level data, which often requires additional tools to process and analyze after the fact.
- B. Incorrect.
Azure Monitor for Containers is intended for containerized workloads (e.g., Kubernetes). It does not provide near real-time network performance insights for individual VMs across subnets.
- C. Correct.
This is the correct answer. Azure Network Watcher's Connection Monitor gives near real-time visibility into network performance between Azure resources (like VMs), including latency metrics. By integrating with Log Analytics, you can centralize and analyze these metrics effectively.
- D. Incorrect.
Azure Traffic Manager is a DNS-based traffic routing solution primarily used for distributing traffic across multiple endpoints or regions. It does not offer built-in network performance monitoring or near real-time traffic analysis between VMs in different subnets.