You need to log the source IP, destination IP, port, and whether traffic was allowed or denied by an NSG for compliance auditing. You also want to visualize this traffic in Power BI. Which Azure feature should you enable?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: NSG Flow Logs and Traffic Analytics

Network Watcher NSG Flow Logs allow you to log the 5-tuple information about ingress and egress IP traffic through an NSG, including rule matches (allow/deny). By enabling Traffic ...

๐Ÿ“‹Part of Microsoft Certified: Azure Network Engineer Associate (AZ-700) ยท Azure Certification Practice
Real Exam ScenarioNetwork Watcher

You need to log the source IP, destination IP, port, and whether traffic was allowed or denied by an NSG for compliance auditing. You also want to visualize this traffic in Power BI. Which Azure feature should you enable?

โœ“ Correct Answer & ExplanationNetwork Watcher

Correct Answer

NSG Flow Logs and Traffic Analytics

Why This Answer Is Correct

Network Watcher NSG Flow Logs allow you to log the 5-tuple information about ingress and egress IP traffic through an NSG, including rule matches (allow/deny). By enabling Traffic Analytics, these logs are ingested into Log Analytics, providing rich visualizations, geographic mapping, and the ability to export to tools like Power BI.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Network Watcher โ€” a core concept tested in Microsoft Certified: Azure Network Engineer Associate (AZ-700). Understanding Network Watcher is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.