Microsoft Azure Administrator Associate AZ-104 Practice Question

The 'IP flow verify' feature in Azure Network Watcher allows you to test the communication between a source and a destination IP address and port, and reports whether the traffic is allowed or denied by NSG rules or user-defined routes. This makes it the appropriate tool to determine if NSG rules are affecting the traffic to the endpoint. 'Connection troubleshoot' helps diagnose a connection but does not show NSG rule evaluations. 'Packet capture' collects network traffic data from virtual machines but does not directly indicate NSG rule impact. 'Next hop' determines the next hop for packets but does not provide NSG rule information.