Practice Test
True/False: Azure Network Watcher is a network performance monitoring, diagnostic, and analytics service.
- Answer: True.
Explanation: Azure Network Watcher is designed to monitor, diagnose, visualize, and gain insights from the network performance in Azure.
The Azure Network Watcher service is automatically enabled when you create a new resource group.
- Answer: False.
Explanation: You need to manually enable Azure Network Watcher in every region where you have Azure resources.
What features does Azure Network Watcher provide?
- a. Packet capture
- b. IP flow verify
- c. Next hop
- d. NSG flow log analytics
- e. All of the above
- Answer: e. All of the above
Explanation: Azure Network Watcher provides a variety of diagnostic and analytics capabilities including packet capture, IP flow verify, next hop, and NSG flow log analytics.
In Azure Network Watcher, what does the Next Hop feature do?
- a. Identify issues with traffic routing.
- b. Capture package data.
- c. Verify IP flow.
- d. Analyze NSG flow logs.
- Answer: a. Identify issues with traffic routing.
Explanation: Azure Network Watcher’s Next Hop feature identifies the next hop type and IP address to determine whether any routing problem exists.
True/False: You can utilize the packet capture tool in Azure Network Watcher for capturing traffic data without having to understand filter language syntax.
- Answer: True.
Explanation: The packet capture tool in Azure Network Watcher allows you to create and manage packet captures without needing to understand the filter language syntax by providing a GUI.
What is Azure Network Watcher’s Connection Monitor used for?
- a. Monitoring network performance
- b. Monitoring network security
- c. Monitoring network data flow
- d. All of the above
- Answer: a. Monitoring network performance
Explanation: Connection Monitor is a component of Azure Network Watcher that monitors the network connectivity and performance between two endpoints.
The IP flow verify feature in Azure Network Watcher can trace a packet from source IP to destination IP.
- Answer: False.
Explanation: This feature does not actually trace the packet from source to destination but it can verify if a direct TCP/UDP communication is possible between a source and destination.
True/False: Network security group (NSG) flow logs in Azure Network Watcher capture the NSG’s inbound and outbound traffic for analysis purposes.
- Answer: True.
Explanation: NSG flow logs are used to log inbound and outbound traffic from an NSG, this can be used later to analyze and gain insights into traffic patterns.
True/False: You are able to use Azure Network Watcher across subscriptions and management groups.
- Answer: True.
Explanation: Azure Network Watcher’s capabilities including Connection Monitor, can be used across subscriptions and management groups via the Azure portal.
What diagnostic tool does Azure Network Watcher provide to diagnose VPN Gateway connectivity?
- a. IP flow verify
- b. VPN diagnostics
- c. Next hop
- d. Traffic Analytics
- Answer: b. VPN diagnostics
Explanation: Azure Network Watcher provides VPN diagnostics specifically to diagnose connectivity issues with VPN Gateways.
Interview Questions
What is Azure Network Watcher?
Azure Network Watcher is a service that provides tools to monitor, diagnose, view metrics, and enable or disable logs for resources in an Azure virtual network.
How can Azure Network Watcher help in troubleshooting?
Azure Network Watcher offers several troubleshooting tools like IP flow verify, Security Group view, Next hop, VPN diagnostics, etc. These tools help in validating network performance, optimizing performance, and connectivity troubleshooting.
Can Network Watcher be used to detect security threats?
Yes, Azure Network Watcher’s packet capture function can be used to trace incoming and outgoing packets which can help identify potential security threats.
What is Next Hop in Azure Network Watcher?
Next Hop in Azure Network Watcher is a troubleshooting tool that provides the next hop type and IP address based on the specified virtual machine, and network interface.
Is Azure Network Watcher Enabled by default?
No, Azure Network Watcher is not enabled by default. You need to enable it at a regional level.
What is the purpose of the topology feature in Azure Network Watcher?
The Topology feature in Azure Network Watcher provides a visual representation of the user’s network resources in a given subscription and resource group. It helps in understanding network configurations and diagnosing network anomalies.
Which Azure service provides comprehensive monitoring of Azure resources, including Azure Network Watcher?
Azure Monitor provides comprehensive monitoring of Azure resources, including Azure Network Watcher.
Which tool in Network Watcher allows a user to check if traffic is allowed or denied to or from a Virtual Machine?
The IP Flow Verify tool in Azure Network Watcher allows users to verify if traffic is allowed or denied to or from a Virtual Machine.
What is Traffic Analytics in Azure Network Watcher?
Traffic Analytics is a cloud-based solution that provides visibility into user’s Azure network traffic. It uses data from Network Watcher logs and processes it to provide insights into traffic flow across their Azure resources.
How can Packet capture in Network Watcher be useful?
Packet capture tool in Network Watcher allows you to create capture sessions to track traffic to and from a virtual machine. Packet data can be used to diagnose network anomalies, both reactively and proactively.
Can Network Watcher monitor resources that are not inside a Virtual Network?
No, Network Watcher is designed to monitor and diagnose conditions specific to Network resources that are used inside a Virtual Network.
Can Azure Network Watcher diagnose VPN Gateway?
Yes, Azure Network Watcher has a VPN diagnostics feature that you can use to diagnose your VPN Gateway.
Can Azure Network Watcher logs be integrated with other services?
Yes, Azure Network Watcher logs can be integrated with Azure Monitor Logs and Azure Monitor.
What is the use of Connection Troubleshoot in Network Watcher?
Connection Troubleshoot in Network Watcher helps to determine whether a direct TCP connection can be established between a source and destination, and provides detailed insights if the connection fails.
Is it possible to export the data from Azure Network Watcher for additional analysis?
Yes, you can export the data captured by Azure Network Watcher to a .cap file for further analysis with packet inspection tools.
extutorials.com