ANSWER B
https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics
Prerequisites
Traffic analytics requires the following prerequisites:

A Network Watcher enabled subscription. For more information, see Enable or disable Azure Network Watcher.

NSG flow logs enabled for the network security groups you want to monitor or VNet flow logs enabled for the virtual network you want to monitor. For more information, see Create a flow log or Enable VNet flow logs.

An Azure Log Analytics workspace with read and write access. For more information, see Create a Log Analytics workspace.

One of the following Azure built-in roles needs to be assigned to your account:

Deployment model Role
Resource Manager Owner
Contributor
Network contributor 1 and Monitoring contributor 2