AZ-700 Question 64
Select 3You manage a multi-tier application environment in Azure that includes multiple Virtual Networks, an Azure Load Balancer, and an Application Gateway. The environment spans two Azure regions. You need to implement a centralized monitoring solution that collects network traffic patterns, diagnostic logs from your load balancer and application gateway, and provides tools to troubleshoot connectivity across the entire deployment with minimal manual configuration. Which three actions should you take?
- A
Enable Azure Network Watcher in each region and configure Connection Monitor to track and diagnose connectivity.
- B
Set up Diagnostic settings on the Azure Load Balancer and Application Gateway to send logs and metrics to a single Log Analytics workspace.
- C
Use Application Insights to collect and store all Network Security Group (NSG) and platform logs for real-time analysis.
- D
Enable NSG Flow logs on each subnet or NSG and publish them to the same Log Analytics workspace.
- E
Deploy an ExpressRoute Gateway in each region to gain access to advanced traffic monitoring features.
Show answer and explanation
Correct answers: A, B, D
Explanation
A robust network monitoring solution in Azure often includes enabling Network Watcher, collecting logs from load balancers and application gateways in a Log Analytics workspace, and enabling NSG Flow logs for traffic analytics. For detailed guidance, see Microsoft's documentation on Network Watcher (https://learn.microsoft.com/azure/network-watcher) and Log Analytics (https://learn.microsoft.com/azure/azure-monitor/logs/log-analytics-portal).
- A. Correct.
Option 1 is correct. Azure Network Watcher needs to be enabled in every region where you have resources. Connection Monitor helps you verify end-to-end connectivity in real time and troubleshoot network issues.
- B. Correct.
Option 2 is correct. Configuring Diagnostic settings to send load balancer and Application Gateway logs and metrics to a Log Analytics workspace provides centralized storage and analysis using Azure Monitor queries.
- C. Incorrect.
Option 3 is incorrect. Application Insights is primarily used for application telemetry and performance metrics, not for raw network-level logs. NSG logs and platform logs are typically directed to a Log Analytics workspace.
- D. Correct.
Option 4 is correct. Enabling NSG Flow logs captures important network traffic information. Consolidating these logs in the Log Analytics workspace allows you to use tools like Traffic Analytics for aggregated insights.
- E. Incorrect.
Option 5 is incorrect. Deploying ExpressRoute Gateway is only necessary for providing private connections to your on-premises network or partner services, not for typical Azure-level network monitoring.