You have a network security group named NSG1. You need to enable network security group (NS) flow logs for NSG1. The solution must support retention policies. What should you create first?

Question

Options

• AA standard general-purpose v2 Azure Storage account
• BAn Azure Log Analytics workspace
• CA standard general-purpose v1 Azure Storage account
• DA premium Block blobs Azure Storage account

• A
  84% (56)
• B
  9% (6)
• C
  4% (3)
• D
  3% (2)

Explanation

NSG flow logs are written to an Azure Storage account. To support retention policies (automatically deleting logs after a configured number of days), the storage account must meet specific requirements: it must be Standard tier (not Premium) and general-purpose v2 (not v1). Option B (Log Analytics workspace) is used for Traffic Analytics dashboards built on top of flow log data - it is not the primary destination for raw flow logs and is not required first. Option C (standard general-purpose v1) is a legacy SKU that lacks full support for the blob storage features NSG flow logs rely on, including retention policies. Option D (premium Block blobs) is not a supported account type for NSG flow logs. Therefore, a standard general-purpose v2 storage account must be created first.

No community discussion yet for this question.