Microsoft Azure Security Engineer Associate AZ-500 Practice Question
You manage Azure virtual networks configured in a hub-and-spoke layout. A security engineer reports that an NVA deployed in a spoke may be rewriting outbound packets. Without installing any agent inside the affected Linux VM, you must collect packet-level data as the traffic leaves the VM to validate the claim. Which Network Watcher capability should you use?
Network Watcher packet capture lets you start an on-demand or scheduled trace that records packets as they enter or leave an Azure VM. The feature deploys a lightweight, Azure-managed extension automatically and does not require you to install or configure software inside the guest OS. IP flow verify only checks whether a flow is allowed or denied by NSG rules; it does not capture packets. Connection monitor measures connectivity and latency but provides no packet payloads. NSG flow logs record summary information about flows that cross an NSG, not the full packets themselves. Therefore, packet capture is the only option that meets the requirements.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the role of Network Watcher in Azure?
Open an interactive chat with Bash
How does packet capture work in Network Watcher?
Open an interactive chat with Bash
What is the difference between packet capture and NSG flow logs?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure networking
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .