AZ-801 Question #52: Real Exam Question with Answer & Explanation

Question

You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical line-of-business (LOB) application. After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive. You suspect that the security baseline has caused networking issues. You need to perform a network trace on VM1. What should you do?

Options

• AFrom VM1, run nesscac
• BFrom Performance Monitor on VM1, create a Data Collector Set
• CFrom the Azure portal, configure the Diagnostics settings for VM1
• DFrom the Azure portal, configure the Performance Diagnostics settings for VM1

Explanation

To diagnose networking issues on an Azure VM suspected of being caused by a security baseline, the best approach is to use the Performance Diagnostics settings from the Azure portal to perform a network trace.

Common mistakes.

• A. nesscac is a command-line tool for network tracing in Windows, but running it directly on the VM for a remote diagnosis of Azure VM network issues is not the most integrated or comprehensive Azure troubleshooting method.
• B. Performance Monitor can collect performance data, but creating a Data Collector Set specifically for a network trace is a manual, in-guest process that doesn't leverage Azure's integrated diagnostic tools for remote troubleshooting of network issues.
• C. Azure VM Diagnostics settings primarily collect guest OS metrics, logs, and crash dumps, but do not specifically provide an integrated network trace utility suitable for deep network issue investigation like Performance Diagnostics does.

Concept tested. Azure VM network troubleshooting

Reference. https://learn.microsoft.com/en-us/azure/virtual-machines/troubleshooting/performance-diagnostics

No community discussion yet for this question.