AZ-800 Network Watcher Monitoring 4 — Questions and Answers
Question 1: Connection Monitor (preview) replaces which two legacy Network Watcher tools?
- Packet Capture and IP Flow Verify
- Connection Monitor (classic) and Network Performance Monitor (Correct answer)
- Traffic Analytics and Topology
- Next Hop and Effective Routes
Correct answer: Connection Monitor (classic) and Network Performance Monitor
The updated Connection Monitor consolidates and replaces the legacy Connection Monitor and Network Performance Monitor (NPM) into a single unified experience.
Question 2: You need to view all effective routes applied to a VM's NIC, including UDRs and BGP routes. Which Network Watcher feature do you use?
- Next Hop
- Effective Routes (Correct answer)
- IP Flow Verify
- Topology
Correct answer: Effective Routes
Effective Routes shows the combined routing table for a NIC, merging system routes, UDRs, and BGP-learned routes with their priorities.
Question 3: A Network Watcher Topology view shows a disconnected VNet. What is the most likely cause?
- The VNet has no subnets
- Network Watcher is not enabled in that VNet's region (Correct answer)
- The VNet is in a different subscription
- The VNet uses IPv6
Correct answer: Network Watcher is not enabled in that VNet's region
Topology view requires Network Watcher to be enabled in the same region as the VNet; without it, the topology cannot be discovered.
Question 4: Which role-based access control (RBAC) role provides the minimum permissions needed to enable and read NSG flow logs?
- Reader
- Network Contributor (Correct answer)
- Storage Blob Data Reader
- Monitoring Reader
Correct answer: Network Contributor
Network Contributor includes permissions to enable flow logs on NSGs and manage Network Watcher resources at the network level.
Question 5: Traffic Analytics uses KQL queries in Log Analytics. Which table contains processed NSG flow log data?
- AzureNetworkAnalytics_CL (Correct answer)
- NetworkMonitoring
- AzureDiagnostics
- NSGFlowLogs_CL
Correct answer: AzureNetworkAnalytics_CL
Traffic Analytics writes processed flow log data to the AzureNetworkAnalytics_CL custom log table in the Log Analytics workspace.
Question 6: A packet capture on a Windows VM fails to start with 'Extension not found'. What must you do?
- Install the AzureNetworkWatcherExtension VM extension (Correct answer)
- Enable boot diagnostics on the VM
- Upgrade the VM to a Premium SKU
- Enable accelerated networking
Correct answer: Install the AzureNetworkWatcherExtension VM extension
Packet Capture requires the AzureNetworkWatcherExtension to be installed on the VM to facilitate the capture process.
Question 7: You want Connection Monitor to test connectivity from an on-premises server to an Azure VM. What must you install on the on-premises server?
- Azure Network Watcher Extension
- Log Analytics agent (MMA or AMA) (Correct answer)
- Azure Arc agent only
- Nothing—it is agentless
Correct answer: Log Analytics agent (MMA or AMA)
Connection Monitor requires the Log Analytics agent (MMA or AMA) on non-Azure machines to participate as a source or destination endpoint.
AZ-800 Network Watcher Monitoring 4
Connection Monitor (preview) replaces which two legacy Network Watcher tools?