Skill 4.4 -- Monitor and troubleshoot virtual networking

Question 1

What is Azure NPM

Answer 1

Network Performance Monitor (NPM) is a networking monitoring solution for hybrid networks that enables you to monitor network connectivity and performance between various points in your network, both in Azure and On-Premises

Question 2

What three services are provided by network performance monitor

Answer 2

Performance Monitor – Used to monitor connectivity between various points in your network both in Azure and on premises.
Service Connectivity Monitor – Used to monitor outbound connectivity from nodes on your network to any external service with an open TCP port.
ExpressRoute – Used to monitor end-to-end connectivity between your on premises network and Azure over Express route. Can use auto-discover for your ExpressRoute network topology

Question 3

Describe Log analytics

Answer 3

Agents installed on each node used to measure network connectivity adn performance. These agensts perform synthetic transactions over TCP or ICMP to measure network performance.

Question 4

Where can NPM be installed from

Answer 4

The Azure Marketplace and Network Watcher

Question 5

What is Network Watcher

Answer 5

an Azure service that acts as a hub for a wide range of network monitoring and diagnostic tools.

Question 6

Where should NPM agents be installed

Answer 6

To monitor a given network link, agents should be installed on servers at both ends of that link
To monitor connections between subnets an agent should be installed on at least one server in each subnet.

Question 7

Describe Performance Monitor

Answer 7

Used to monitor Packet Loss and Latency
Requires a log analytics agent at each end

Enables you to monitor packet loss and latency between your endpoint, both in Azure and on-premises. A VM or server running the log analytics agent is required at both ends of each monitored connection. It can be set up with TCP or ICMP-based monitoring

Question 8

Describe Service Connectivity Monitor

Answer 8

Used to test outbound connectivity from your network to open TCP port, such as website, application, database. It supports pre-configured endpoints for Microsoft 365 and Dynamics. You can also configure custom test to arbitrary endpoints.

Question 9

Describe Express Route Monitor

Answer 9

Allows monitoring of end-to-end network connectivity and performance between on-premises and Azure endpoints over ExpressRoute connections. It can autodetect ExpressRoute Circuits and your network topology, and track bandwidth utilization, packet loss, and network latency. Reports are available for circuits and peering. Takes 30-60 minutes for the first ExpressRoute Circuits to become available

Question 10

Describe Azure Network watcher

Answer 10

enabled as a single instance per Azure Region. It is not deployed like a conventional resource, but it does appear as a resource in a resource. group

Question 11

What is IP Flow Verify

Answer 11

provides a quick and easy way to test whether a given network flow will be allowed into or out of an Azure virtual machine. It will report whether the requested traffic is allowed or blocked and in the latter case, which NSG rule is blocking the flow.

Question 12

What are possible next hop types

Answer 12

Internet
VirtualAppliance
VirtualNetworkGateway
VirtualNetwork
VirtualNetwork Peering
VirtualNetworkServiceEndpoint
None

Question 13

Describe the packet capture tool

Answer 13

Allows you to capture network packets entering or leaving your virtual machines. It is powerful tool for deep network diagnostics. You can capture all packets, or a filtered subset based on the protocol and local and remote IP addresses and ports. Packet captures are stored as a file on the VM or in an Azure storage account

Question 14

Describe the VPN troubleshooting Tool

Answer 14

Provides automated diagnostics of Azure VPN gateways and connections. The results provide a detailed report on gateway health and connection health, providing accurate points regarding common issues that might occur when enabling informed remeidation.

Question 15

Describe Connection troubleshoot

Answer 15

Network Watcher feature designed to allow you to test the connection between an Azure VM or App Gateway and another endpoint. The difference is that connection monitor provides ongoing connection monitoring whearas connection troubleshoot provides a point-in-time test

Question 16

Describe Connection Monitor

Answer 16

Similar to connection troubleshoot in that is uses the same mechanism to test the connection between an Azure VM or App Gateway and another endpoint. The difference is that connection mointor provides adn ongoing connection monitoring

Question 17

Describe Azure Monitor for networks

Answer 17

Provides teh ability to view events representing network traffic being blocked by multiple NSGs

Question 18

Describe the diagnostic toolkit element

Answer 18

in Azure Monitor for entworks interface in teh Azure portal provides access to the network watcher tools including a packet capture

Question 19

What is required to implement connection monitoring for Azure Monitor

Answer 19

You have to have at least one Azure VM which will host the Network Watcher agent installations