Which two actions should you perform?

You have 10 virtual machines on a single subnet that has a single network security group (NSG).

You need to log the network traffic to an Azure Storage account.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Install the Network Performance Monitor solution.
B . Enable Azure Network Watcher.
C . Enable diagnostic logging for the NS
E . Enable NSG flow logs.
F . Create an Azure Log Analytics workspace.

View Answer

Answer: B,D

Explanation:

A network security group (NSG) enables you to filter inbound traffic to, and outbound traffic from, a virtual machine (VM). You can log network traffic that flows through an NSG with Network Watcher’s NSG flow log capability.

Steps include:

✑ Create a VM with a network security group

✑ Enable Network Watcher and register the Microsoft. Insights provider

✑ Enable a traffic flow log for an NSG, using Network Watcher’s NSG flow log capability

✑ Download logged data

✑ View logged data

Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal