A team building a new workload in 2026 wants flow-level records of its virtual network traffic. NSG flow log creation is no longer available to them. What should they use?
Show answer and explanation
Answer: A
Microsoft stopped allowing creation of new NSG flow logs after June 30, 2025. Virtual network flow logs are the recommended successor and record flow data at the virtual network level, which suits new deployments. Activity log alerts track control-plane events, and Route Server diagnostics concern BGP route exchange, so neither provides flow telemetry.
Why the other options are wrong
- B. New NSG flow logs cannot be created for new configurations after the June 2025 cutoff, so this option is unavailable for the new workload.
- C. Activity log alerts notify on control-plane operations such as resource changes. They do not record per-flow traffic data.
- D. Route Server diagnostics relate to BGP peering and route exchange with network virtual appliances. They do not produce flow records.
Exam tip. Expect exam questions that replace NSG flow logs with virtual network flow logs for new deployments.