A network administrator needs to monitor traffic flows between two VMs in the same virtual network. They want to see the number of flows, bytes transferred, and whether traffic was allowed or denied, and they want to query this data over time. What should they configure?

Enable NSG flow logs on the NSG associated with the VMs' subnets and send them to a Log Analytics workspace.

Use IP flow verify between the two VMs.

Create a packet capture on both VMs and save the captures to a storage account.

Enable connection monitor between the two VMs.

What is the primary purpose of attack path analysis in Microsoft Defender for Cloud?

To identify exploitable attack paths

To provide a numerical security score

A security analyst discovers an attack path in Defender for Cloud that goes from an internet-facing VM to a storage account through a series of network and identity misconfigurations. The analyst wants to confirm the path is still valid after a recent NSG change. What should they do?

Review Network Watcher topology to see if the network path is still possible.

Re-run attack path analysis to see if the path still exists.

Check the Secure Score to see if the recommendation is still present.

Use Cloud Security Explorer to query for the same resources and verify the NSG rules.

A company needs to retain network traffic logs for 90 days for compliance. They currently have NSG flow logs enabled and sent to a Log Analytics workspace with a 30-day retention period. What should they do to meet the retention requirement without losing the ability to query the logs?

Increase the retention period of the Log Analytics workspace to 90 days.

Export the NSG flow logs to a storage account and set a lifecycle policy to retain for 90 days.

Enable NSG flow logs version 2 with a 90-day retention setting.

Create a second Log Analytics workspace with 90-day retention and send logs there.

Microsoft Certified:Azure Network Engineer Associate

Domain 1Objective 4

Monitor Networks AZ-700 Practice Questions (Page 5)

Part of the Design and implement core networking infrastructure domain, which accounts for 25–30% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

25–30%of the exam

Questions 21–25

21application · medium
A network administrator needs to monitor traffic flows between two VMs in the same virtual network. They want to see the number of flows, bytes transferred, and whether traffic was allowed or denied, and they want to query this data over time. What should they configure?
Select an answer first
22foundation · easy
What is the primary purpose of attack path analysis in Microsoft Defender for Cloud?
Select an answer first
23expert · hard
A security analyst discovers an attack path in Defender for Cloud that goes from an internet-facing VM to a storage account through a series of network and identity misconfigurations. The analyst wants to confirm the path is still valid after a recent NSG change. What should they do?
Select an answer first
24expert · hard
A company needs to retain network traffic logs for 90 days for compliance. They currently have NSG flow logs enabled and sent to a Log Analytics workspace with a 30-day retention period. What should they do to meet the retention requirement without losing the ability to query the logs?
Select an answer first
25foundation · easy
Which Azure service provides a centralized monitoring solution for network resources, including connection monitors and traffic analytics?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.