AZ-720 Study Guide Brilliant AZ-720 Exam Dumps PDF
View AZ-720 Exam Question Dumps With Latest Demo
Microsoft AZ-720 certification exam is designed for IT professionals who are responsible for troubleshooting connectivity issues in Microsoft Azure environments. Troubleshooting Microsoft Azure Connectivity certification is targeted towards individuals who have experience in networking, security, and Azure infrastructure. AZ-720 exam aims to validate the candidate's ability to identify and resolve issues related to Azure connectivity, including network security groups, virtual networks, and Azure ExpressRoute.
Microsoft AZ-720 exam is part of the Microsoft Certified: Azure Network Engineer Associate certification path. Troubleshooting Microsoft Azure Connectivity certification path is designed for network engineers who specialize in implementing and managing Azure networking solutions. Troubleshooting Microsoft Azure Connectivity certification path includes two exams, the AZ-700 (Designing and Implementing Microsoft Azure Networking Solutions) and the AZ-720 (Troubleshooting Microsoft Azure Connectivity). By passing both exams, candidates can demonstrate their proficiency in designing, implementing, and troubleshooting Azure networking solutions.
NEW QUESTION # 37
A company uses an Azure VPN gateway to connect to their on-premises environment.
The company's on-premises VPN gateway is used by several services. One service is experiencing
connectivity issues.
You need to minimize downtime for all services and resolve the connectivity issue.
Which three actions should you perform?
- A. Configure the hashing algorithm to be the same on both gateways.
- B. Configure the pre-shared key to be different on the Azure VPN gateway and the on-premises VPN gateways.
- C. Rest the VPN connection.
- D. Configure the pre-shared key to be the same on the Azure VPN gateway and the on-premises VPN
gateways. - E. Configure the hashing algorithm to be different on both gateways.
- F. Rest the VPN gateway.
Answer: A,B,D
NEW QUESTION # 38
A company named Contoso connects its on-premises resources to Azure by using ExpressRoute.
An administrator reports that the circuit is in a failed state.
You need to resolve the issue.
How should you complete the PowerShell commands?
Answer:
Explanation:
NEW QUESTION # 39
A company hosts a network virtual appliance (VNA) and Azure Route Server in different virtual networks (VNets). Border Gateway Protocol (BGP) peering is enabled between the NVA loses internet connectivity after it advertises the default route to the route server.
You need to resolve the problem with the NVA.
What should you do?
- A. Configure a public IP address on the route server.
- B. Configure a user-defined route on the NVA subnet.
- C. Configure a unique autonomous system number (ASN) on the NVA.
- D. Move the route server to the same VNet as the NVA.
Answer: C
Explanation:
According to 2, when using Azure Route Server with network virtual appliances (NVAs), you need to ensure that each NVA has a unique ASN that is different from the route server's ASN and any other BGP peer's ASN. Otherwise, there will be routing issues due to BGP loop prevention mechanisms.
You can configure the ASN on the NVA by using its own configuration tools or commands. For more information, see 2.
NEW QUESTION # 40
A company has on-premises application server that runs in System Center Virtual Machine Manager
(SCVMM). The company configures Azure Site Recovery.
An administrator at the company reports that they receive an error message. The error message indicates that
there are replication issues.
You need to troubleshoot the issue.
Which log should you review?
- A. SCVMM debug log
- B. Network Watcher diagnostic log
- C. Network Security Group flow log
- D. Azure Monitor log
Answer: C
NEW QUESTION # 41
A company uses Azure Active Directory (Azure AD) with Azure role-based access control (RBAC) for access to resources.
Some users report that they are unable to grant RBAC roles to other users.
You need to troubleshoot the issue.
How should you complete the Azure Monitor query?
Answer:
Explanation:
NEW QUESTION # 42
A company plans to use an Azure PaaS service by using Azure Private Link service. The azure Private Link service and an endpoint have been configured.
The company reports that the endpoint is unable to connect to the service.
You need to resolve the connectivity issue.
What should you do?
- A. Disable the endpoint network policies.
- B. Validate the VPN device.
- C. Approve the connection state.
- D. Disable the service network policies.
Answer: D
NEW QUESTION # 43
A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active
Directory Domain Services (Azure AD DS) instance.
Users report that they are unable to sign into Azure AD DS after being provisioned from Azure AD. You
verify the user accounts exist in Azure AD DS.
You need to resolve the issue.
What should you do?
- A. Instruct the users to change their password in Azure AD.
- B. Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable
Azure AD DS again. - C. Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS
again. - D. Deploy Azure AD Connect.
Answer: A
NEW QUESTION # 44
A company uses Azure virtual machines (VMs) in multiple regions. The VMs have the following configuration:
The backend pool of an internal Azure Load Balancer (ILB) named ILB1 contains VM1 and VM2. The ILB uses the Basic SKU and is in a resource group RG2.
Virtual network peering has been configured between VNet1 and VNet2.
Users report that they are unable to connect to resources on VM1 and VM2 by using ILB1 from VM3.
You need to resolve the connectivity issues.
What should you do?
- A. Move VM1 and VM2 into RG3.
- B. Move ILB1 to RG1.
- C. Redeploy VM1 and VM2 into availability zones.
- D. Redeploy the ILB using the Standard SKU.
Answer: C
NEW QUESTION # 45
A company attempts to implement just-in-time (JIT) access for a virtual machine (VM) named VM1.
The company reports that they are unable to complete the process.
You need to implement JIT access and test the deployment.
Which PowerShell cmdlets should you run?
Answer:
Explanation:
NEW QUESTION # 46
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Create a new manual backup in Backup center.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
It is unlikely that creating a new manual backup in Backup center would resolve the issue of an Azure VM backup job failing after enabling backups for the VM through the Azure portal. To troubleshoot the issue, the administrator should first check the Azure VM backup job logs and identify the specific error message or code provided. This can help identify the underlying issue and the appropriate solution.
Therefore, the solution mentioned in the question is incorrect and the answer is B. No.
Reference:
Troubleshoot Azure VM backup failures (Microsoft documentation)
NEW QUESTION # 47
A company has two virtual networks (VNets) that are configured to use peering. Several Azure virtual machines are connected to each network. An on-premises network is connected to one of the VNets by using Azure VPN Gateway.
An administrator reports that communication between applications across the VNets is failing.
You need to troubleshoot the issue.
Which two features can you use to achieve the goal?
- A. Next hop
- B. NSG flow logs
- C. AzureNetworkWatchExtension
- D. IP flow verify
- E. Network Watcher topology
Answer: A,D
NEW QUESTION # 48
A company uses Azure Site Recovery for their on-premises Hyper-V servers. The company manages servers by using System Center Virtual Machine Manager (SCVMM).
An administrator reports that replication to the secondary site has failed.
You need to inspect the SCVMM logs and configuration files.
Answer:
Explanation:
NEW QUESTION # 49
A company deploys the Azure Application Gateway Web Application Firewall (WAF) to protect their web applications.
Users in a remote office location report the following issues:
Unable to access part of a web application.
Part of the web application is failing to load.
Parts of the web application has activities that are not performing as expected.
You need to troubleshoot the issue.
Which diagnostic log should you review?
- A. Access
- B. Azure Activity
- C. Firewall
- D. Performance
Answer: C
Explanation:
To troubleshoot the issue, you should review the Firewall diagnostic log. According to 2, Azure Application Gateway Web Application Firewall (WAF) logs requests that are logged through either detection or prevention mode of an application gateway that is configured with WAF. You can use this log to view and analyze blocked requests and identify false positives or false negatives.
NEW QUESTION # 50
A company deploys the Azure Application Gateway Web Application Firewall (WAF) to protect their web
applications.
Users in a remote office location report the following issues:
* Unable to access part of a web application.
* Part of the web application is failing to load.
* Parts of the web application has activities that are not performing as expected.
You need to troubleshoot the issue.
Which diagnostic log should you review?
- A. Access
- B. Firewall
- C. Performance
- D. Azure Activity
Answer: D
NEW QUESTION # 51
You need to troubleshoot the sales department issues.
How should you configure the system? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 52
A company manages a solution that uses Azure Functions.
A function returns the following error: Azure Function Runtime is unreachable.
You need to troubleshoot the issue.
What are two possible causes of the issue?
- A. The function key was deleted.
- B. The storage account application settings were deleted.
- C. The execution quota is full.
- D. The company did not configure a timer trigger.
- E. The storage account for the function was deleted.
Answer: B,D
NEW QUESTION # 53
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Create a profile manually, add the server FQDN and reissue the client certificate.
- B. Install an IKEv2 VPN client on the user's computers.
- C. Reissue the client certificate with client authentication enabled.
- D. Reissue the client certificate with server authentication enabled.
Answer: A
NEW QUESTION # 54
You need to resolve the connectivity issues for VM1 to Contoso Suites.
What parameters should you configure for each peering connection? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 55
You need to troubleshoot and resolve issues reported for contosostorage1.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 56
A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to
synchronize users from an Active Directory Domain Services (AD DS).
The synchronization of a user object is failing.
You need to troubleshoot the failing synchronization by using a built-in Azure AD Connect troubleshooting
task.
Which two pieces of information should you collect before you start troubleshooting?
- A. Object distinguished name
- B. Object globally unique identifier
- C. AD connector name
- D. Azure AD connector name
- E. Object common name
Answer: B,D
NEW QUESTION # 57
A company uses Azure Backup Server to back up re deployed in an availability group.
The company reports that a backup operation for a database fails. The following error message displays:
Unable to configure protection.
You need to ensure that the backup operation runs successfully.
What should you do?
- A. Run the following command on the backup server: net stop OBEngine
- B. Add the Sysadmin role to the system account on the SQL Server instance.
- C. Configure the availability group replicas to allow read and write operations on the SQL Server instance.
- D. Add a partitioned drive to the storage pool on the backup server.
Answer: B
Explanation:
To ensure that the backup operation for a database in an availability group using Azure Backup Server runs successfully, you should add the Sysadmin role to the system account on the SQL Server instance. The system account on the SQL Server instance must have the Sysadmin role to perform backup operations. So the correct answer is B. Add the Sysadmin role to the system account on the SQL Server instance.
You can find more information about Azure Backup Server and its requirements in the official Microsoft documentation.
NEW QUESTION # 58
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD
Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Use a global administrator account with a password that is less than 256 characters to configure
Azure AD Connect.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: B
NEW QUESTION # 59
A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure.
The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are expected to sustain 300 Mbps.
You need to ensure that the VMs are compatible with Azure.
Which change should you make?
- A. Install a kernel name that ends with -azure.
- B. Increase the TCP buffers and window size kernel parameters.
- C. Redeploy the VM with Accelerated Networking enabled.
- D. Configure the network interfaces to 1000 Mbps/full duplex.
Answer: C
Explanation:
To ensure that Ubuntu Linux servers are compatible with Azure and to increase network throughput from 20 Mbps to 300 Mbps, you should redeploy the VM with Accelerated Networking enabled. Therefore, option C is correct. You should redeploy the VM with Accelerated Networking enabled.
NEW QUESTION # 60
A company uses an Azure Backup agent to back up specific files and folder from an Azure virtual machine (VM) and an on-premises VM.
An administrator reports that the backup job fails on both VMs. Errors are returned in Microsoft Azure Recovery Services (MARS).
You need to troubleshoot the backup issues.
Which troubleshooting solution should you use?
Answer:
Explanation:
NEW QUESTION # 61
A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure.
The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are expected to sustain 300 Mbps.
You need to ensure that the VMs are compatible with Azure.
Which change should you make?
- A. Install a kernel name that ends with -azure.
- B. Configure the network interfaces to 1000 Mbps/full duplex.
- C. Redeploy the VM with Accelerated Networking enabled.
- D. Increase the TCP buffers and window size kernel parameters.
Answer: B
NEW QUESTION # 62
......
Free AZ-720 Test Questions Real Practice Test Questions: https://www.dumpsquestion.com/AZ-720-exam-dumps-collection.html
AZ-720 Dumps Updated Oct 18, 2023 WIith 121 Questions: https://drive.google.com/open?id=1JmxmFj605mFlqcggTDhXXIVvVbmAkOzr