AZ-700 Question 69
Select 2You manage an Azure environment with virtual machines spread across two regions. Users are reporting intermittent high latency when accessing a web service running between these VMs. You suspect a network routing or security configuration issue. Which two actions should you take to quickly identify and troubleshoot the root cause using Azure Monitor Network Insights? (Choose two.)
- A
Create and run a Connection Monitor test between the regional VMs in Azure Monitor Network Insights to measure latency and packet loss.
- B
Review the NSG Flow Logs in Azure Monitor Network Insights for the affected VMs to identify potential blocking or throttling.
- C
Enable Network Watcher in the source region only and ignore the destination region, since metrics will still be captured.
- D
Disable your existing Application Gateway instance to see if the latency disappears.
Show answer and explanation
Correct answers: A, B
Explanation
In Azure Monitor Network Insights, Connection Monitor helps measure network latency and packet loss across different endpoints, while NSG Flow Logs help diagnose blocked or throttled traffic due to security configurations. Both of these are essential first steps in isolating network performance issues. For more information, refer to Azure documentation on Network Insights and Connection Monitor: https://learn.microsoft.com/azure/network-watcher/network-insights-overview
- A. Correct.
Option 1 is correct. Connection Monitor within Azure Monitor Network Insights allows you to establish tests between endpoints (such as VMs) and gather metrics like latency and packet loss. This is one of the most direct ways to diagnose cross-region network performance issues.
- B. Correct.
Option 2 is correct. NSG Flow Logs within Network Insights provide insights into the traffic flow at the Network Security Group level. Reviewing these logs helps you detect inbound or outbound traffic being blocked or experiencing delays, which can directly lead to latency or drops.
- C. Incorrect.
Option 3 is incorrect. You must ensure Network Watcher is enabled in all relevant regions (both source and destination) so that each region can properly capture diagnostic data. Enabling it only in the source region omits crucial visibility into the destination� network path.
- D. Incorrect.
Option 4 is incorrect. Disabling the Application Gateway without clear evidence that it is causing the altitude problem can introduce downtime and does not leverage built-in monitoring tools. The recommended approach is to use monitoring data to identify the issue rather than guesswork or trial-and-error.