Free Microsoft Azure AZ-700 Actual Exam Questions - Question 10 Discussion
NSG1 is associated to the NIC of VM1 and contains the rules shown in the following table.
You collect NSG flow logs for five minutes for the following activities:
• Two RDP sessions from VM1 to VM2, each initiated from a different TCP port
• Three SSH sessions from VM2 to VM1, each initiated from a different TCP port
You analyze the logs by using Traffic Analytics in Azure Network Watcher. How many aggregated flow
entries will Traffic Analytics identify?
It’s D. Each session has both inbound and outbound traffic, and since each RDP and SSH session uses a unique source port, that means Traffic Analytics will log both directions separately. So for 5 sessions, you get 10 flow entries total. Counting only one direction or aggregating by session wouldn’t capture the full picture here.
D, since each session is bidirectional and has unique ports, doubling the count.
Probably C. Each unique session has a different source port, so Traffic Analytics should count each as a separate flow entry, adding up to five in total.
Maybe C since each unique session uses a different source port, so they probably get counted as separate flows. D would mean counting both directions separately, but the question seems to focus on sessions only.
It’s B because flows with the same source and destination IPs and ports get aggregated, so even with multiple sessions, similar traffic types merge into fewer flow entries.
It’s B because each session type (RDP and SSH) is counted once per direction; with 2 RDP and 3 SSH sessions, but flow logs aggregate similar flows, so fewer than total individual sessions appear.
It’s C. Each unique session with different source ports counts as a separate flow entry. Since there are 2 RDP sessions and 3 SSH sessions, that makes 5 distinct flows total. D would be if counting both directions separately for all sessions, but the question implies aggregated entries, so 5 is the right count here.
D