On your first day at MDFT Pro, a well-known training agency, the company deploys several virtual machines on-premises and to Azure. ExpressRoute is deployed and configured for on-premises to Azure connectivity.
Several virtual machines exhibit network connectivity issues.
You need to analyze the network traffic to identify whether packets are being allowed or denied to the virtual machines.
Solution: Install and configure the Azure Monitoring agent and the Dependency Agent on all the virtual machines. Use VM insights in Azure Monitor to analyze the network traffic.
Does this meet the goal?
Yes is incorrect. VM insights with the Dependency Agent monitors dependency relationships and performance metrics but does not analyze whether packets are being allowed or denied by network security rules.
No is correct. The goal is not met because VM insights does not perform packet-level allow/deny analysis; IP Flow Verify in Network Watcher is the appropriate tool to identify whether NSG rules allow or deny traffic.