Challenge — Fix the app-to-data path and keep watching it

تحدّي — صلّح المسار من الـ App للـ Data وفضل راقبه

After a "security hardening" change, vm-app6 (subnet app, 10.76.1.0/24) can no longer reach vm-data6 (subnet data) on TCP 3389. Find the cause with evidence, fix it with the narrowest possible rule, put continuous monitoring on the path, and record flows of the VNet for the security team.

The 4 tasks you will do

• Requirement 1 — Evidence before the fixالمطلوب 1 — الدليل قبل التصليح
• Requirement 2 — Narrowest fixالمطلوب 2 — أضيق تصليح
• Requirement 3 — Continuous monitoringالمطلوب 3 — مراقبة مستمرة
• Requirement 4 — Flow records for securityالمطلوب 4 — سجل الـ Flows لفريق الأمن

The lesson it belongs to

• Use Azure Network Watcher and Connection monitor