Monitor Networks AZ-700 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company's public-facing web application is protected by Azure DDoS Network Protection. The security team wants to be alerted when a DDoS attack is detected and also wants to review the attack's impact afterward. What should they configure?

   • AUse Network Watcher packet capture to record all traffic during an attack and store it in a storage account.
   • BEnable NSG flow logs and query them for suspicious traffic patterns to detect attacks.
   • CConfigure Azure Monitor for Networks to show DDoS attack status and send email alerts automatically.
   • DEnable diagnostic settings for the DDoS protection plan to send logs and metrics to a Log Analytics workspace, and create an alert rule on the DDoS attack metric.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company has DDoS Network Protection enabled on a virtual network. They want to monitor the effectiveness of the protection and also see the overall health of their network resources in the same dashboard. What should they use?

   • AMicrosoft Defender for Cloud with DDoS attack path analysis.
   • BAzure Resource Health with DDoS alerts.
   • CAzure Monitor for Networks with DDoS metrics and alerts.
   • DNetwork Watcher connection monitor with DDoS metrics.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which Azure Monitor for Networks feature provides a visual representation of network topology and health?

   • AConnection monitor
   • BNetwork map
   • CTraffic analytics
   • DMetrics explorer
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which Microsoft Defender for Cloud feature provides a list of security recommendations for network resources, such as enabling NSG flow logs or DDoS protection?

   • AAttack path analysis
   • BSecurity recommendations
   • CCloud Security Explorer
   • DSecure Score
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company has a hub-and-spoke network topology in Azure. The network team needs to capture IP traffic between a spoke VM and an on-premises server that communicates through a hub virtual network. The capture must include only traffic to and from the on-premises server's IP address, and the team wants to review the capture later. What should they configure in Network Watcher?

   • AUse IP flow verify on the spoke VM's NIC with the on-premises server IP as the destination to confirm allowed traffic.
   • BEnable NSG flow logs on the spoke subnet's NSG and filter logs by the on-premises server IP in Log Analytics.
   • CEnable connection monitor between the spoke VM and the on-premises server, and export the monitoring data to a Log Analytics workspace.
   • DCreate a packet capture on the spoke VM with a filter for the on-premises server IP, save the capture to a storage account, and download it for review.
   Reveal Solution Discussion Select an answer first