You have 10 virtual machines on a single subnet that has a single network security group (NSG). You need to log the network traffic to an Azure Storage account. What should you do? 

Answer options:

A. Install the Network Performance Monitor solution.
B. Create an Azure Log Analytics workspace.
C. Enable diagnostic logging for the NSG.
D. Enable NSG flow logs.

D

A network security group (NSG) enables you to filter inbound traffic to, and outbound traffic from, a virtual machine (VM). You can log network traffic that flows through an NSG with Network Watcher`s NSG flow log capability. Steps include: ✑ Create a VM with a network security group ✑ Enable Network Watcher and register the Microsoft.Insights provider ✑ Enable a traffic flow log for an NSG, using Network Watcher`s NSG flow log capability ✑ Download logged data View logged data - 

Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal