[2024] Pass Key features of AZ-720 Course with Updated 121 Questions
AZ-720 Sample Practice Exam Questions 2024 Updated Verified
The Microsoft AZ-720 exam covers troubleshooting connectivity issues with Azure Application Gateway. Candidates will need to be familiar with the various components of Application Gateway, including frontend IP configurations, listeners, rules, and backend targets. They will also need to be able to identify and resolve issues with SSL/TLS termination, web application firewall (WAF), and URL-based routing.
NEW QUESTION # 35
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Enable replication and create a recovery plan for the backup vault.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
The solution does not meet the goal. Enabling replication and creating a recovery plan for the backup vault is not relevant to troubleshooting an Azure VM backup job failure. The administrator should troubleshoot the issue by checking the VM's disk configuration, checking the status of the VM guest agent, and ensuring that the backup policy is configured correctly.
NEW QUESTION # 36
You need to resolve the VM2 routing issue.
What should you do?
- A. Add a network interface to VM2.
- B. Modify the IP configuration setting of the Azure network interface resource of VM2.
- C. Modify the IP configuration setting of the Azure network interface resource of VM1.
- D. Add a network interface to VM1.
Answer: B
Explanation:
To resolve the VM2 routing issue, you should modify the IP configuration setting of the Azure network interface resource of VM2. This will ensure that VM2 can communicate with other resources in the virtual network.
Troubleshooting connectivity problems between Azure VMs involves several steps such as checking whether NIC is misconfigured, whether network traffic is blocked by NSG or UDR, whether network traffic is blocked by VM firewall, whether VM app or service is listening on the port and whether the problem is caused by SNAT1.
NEW QUESTION # 37
A company attempts to implement just-in-time (JIT) access for a virtual machine (VM) named VM1.
The company reports that they are unable to complete the process.
You need to implement JIT access and test the deployment.
Which PowerShell cmdlets should you run?
Answer:
Explanation:
NEW QUESTION # 38
A company deploys Azure Traffic Manager load balancing for an Azure App Service solution.
Load balancing performance is showing a degraded status after deployment, and new HTTPS probes are failing to reach the Traffic Manager endpoints.
You need to troubleshoot the probe failure.
How should you complete the PowerShell script?
Answer:
Explanation:
NEW QUESTION # 39
A company develops an Azure Cosmos DB solution.
The solution has the following components:
A virtual network named VNet1 in a resource group named RG1.
A subnet named Subnet1 in VNet1.
A Private Link service.
The company is unable to configure a source IP address for the Private Link service from Subnet1.
You need to resolve the issue for Subnet1.
How should you complete the PowerShell commands?
Answer:
Explanation:
NEW QUESTION # 40
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site
connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
* OpenVPN for the tunnel type.
* Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Create a profile manually, add the server FQDN and reissue the client certificate.
- B. Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.
- C. Reissue the client certificate with client authentication enabled.
- D. Install an IKEv2 VPN client on the user's computers.
Answer: B
NEW QUESTION # 41
A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?
- A. The partner's VPN device is enabled for Perfect forward secrecy.
- B. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
- C. The partner's VPN device and VNetGW1 are configured using the same shared key.
- D. The IP address of the local network gateway matches the partner's VPN device.
Answer: B
NEW QUESTION # 42
A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a
partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?
- A. The partner's VPN device and VNetGW1 are configured using the same shared key.
- B. The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.
- C. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
- D. VNetGW1 has exceeded the subnet Security Association pairs.
Answer: A
NEW QUESTION # 43
A company plans to use an Azure PaaS service by using Azure Private Link service. The azure Private Link service and an endpoint have been configured.
The company reports that the endpoint is unable to connect to the service.
You need to resolve the connectivity issue.
What should you do?
- A. Validate the VPN device.
- B. Disable the endpoint network policies.
- C. Disable the service network policies.
- D. Approve the connection state.
Answer: D
Explanation:
To resolve the connectivity issue, you should approve the connection state. According to 1, Azure Private Link service requires manual approval of connection requests from private endpoints by default. You can approve or reject a connection request by using PowerShell cmdlets or Azure portal.
NEW QUESTION # 44
A company deploys an Azure Firewall. The company reports the following log entry:
For each of the following questions, select Yes or No.
Answer:
Explanation:
NEW QUESTION # 45
A company develops an Azure Cosmos DB solution.
The solution has the following components:
A virtual network named VNet1 in a resource group named RG1.
A subnet named Subnet1 in VNet1.
A Private Link service.
The company is unable to configure a source IP address for the Private Link service from Subnet1.
You need to resolve the issue for Subnet1.
How should you complete the PowerShell commands?
Answer:
Explanation:
NEW QUESTION # 46
A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure.
The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are expected to sustain 300 Mbps.
You need to ensure that the VMs are compatible with Azure.
Which change should you make?
- A. Configure the network interfaces to 1000 Mbps/full duplex.
- B. Redeploy the VM with Accelerated Networking enabled.
- C. Install a kernel name that ends with -azure.
- D. Increase the TCP buffers and window size kernel parameters.
Answer: A
NEW QUESTION # 47
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site
connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
* OpenVPN for the tunnel type.
* Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Reissue the client certificate with server authentication enabled.
- B. Create a profile manually, add the server FQDN and reissue the client certificate.
- C. Reissue the client certificate with client authentication enabled.
- D. Install an IKEv2 VPN client on the user's computers.
Answer: B
NEW QUESTION # 48
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Create a new manual backup in Backup center.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: A
NEW QUESTION # 49
A company creates an Azure resource group named RG1. RG1 has an Azure SQL Database logical server
named sqlsvr1 that hosts the following resources:
An administrator grants a user named User1 the Reader RBAC role in RG1. The administrator grants User2
the Contributor role in sqlsvr1.
User1 reports that they can connect to SQLDB1 from the IP address 155.127.95.212. User1 cannot connect to
SQLDB2. User2 can connect to both SQLDB1 and SQLDB2 from the IP address 121.19.27.18. Both users can
successfully connect to SQLDB1 and SQLDB2 from VM1.
You are helping the administrator troubleshoot the issue. You run the following PowerShell command:
Get-AzSqlServerFirewallRule -ResourceGroupName 'RG1' -ServerName 'sqlsvr1'
The following output displays:
You need to identify the cause for the reported issue and resolve User1's issues. The solution must satisfy the
principle of least privilege.
What should you do?
Answer:
Explanation:
NEW QUESTION # 50
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Reissue the client certificate with server authentication enabled.
- B. Create a profile manually, add the server FQDN and reissue the client certificate.
- C. Reissue the client certificate with client authentication enabled.
- D. Install an IKEv2 VPN client on the user's computers.
Answer: B
NEW QUESTION # 51
A company uses Azure Standard Load Balancer which is configured to export metrics to Azure Monitor.
You receive an email alert for a potential outbound port exhaustion issue from an Azure virtual machine. You add additional front-end IPs to the load balancer.
You need to monitor the load balancer.
How should you complete the configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 52
A company deploys ExpressRoute.
The company reports that there is an autonomous system (AS) number mismatch.
You need to identify the AS number of the circuit.
Which PowerShell cmdlet should you run?
- A. Get-AzExpressRouteCircuit
- B. Get-AzExpressRouteCircuitPeeringConfig
- C. Get-AzExpressRouteCircuitRouteTable
- D. Get-AzExpressRouteCircuitStats
Answer: D
NEW QUESTION # 53
A company deploys a new application and places the application behind an Azure Application Gateway Web
Application Firewall (WAF).
A user with client IP 203.0.113.26 reports that they cannot access the application.
You need to troubleshoot the issue.
How should you complete the query?
Answer:
Explanation:
NEW QUESTION # 54
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Install a Secure Socket Tunneling Protocol (SSTP) VPN client on the user's computers.
- B. Create a profile manually, add the server FQDN and reissue the client certificate.
- C. Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.
- D. Configure preshared key for authentication on the VPN profile.
Answer: B
Explanation:
To resolve the certificate mismatch error, you should create a profile manually, add the server FQDN and reissue the client certificate. According to 1, when you use OpenVPN for tunnel type on point-to-site VPN connections, you need to ensure that your client certificates have the correct server FQDN as one of their subject alternative names (SANs). Otherwise, you will receive a certificate mismatch error when connecting by using a VPN client.
NEW QUESTION # 55
You need to troubleshoot the issues related to VM3.
How should you complete the web link? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 56
A company has an Azure tenant. The company deploys an Azure Firewall named FW1 using the Standard SKU. You configure FW1 using classic firewall rules.
The company creates an application rule collection with the following settings:
Priority: 100
Action: Deny
Rule type: FQDN
Source type: IP address
Source: *
Protocol: http:80,https:443
Target FQDN: *.cloud.contoso.com
An engineer observes that traffic to console.cloud.conotoso.com is still allowed by FW1.
You need to determine why the traffic is allowed.
What should you review?
- A. Infrastructure rules
- B. Application rules
- C. Web categories
- D. Network rules
Answer: D
Explanation:
To determine why the traffic is allowed, you should review network rules. According to 3, Azure Firewall uses network rules to allow or deny traffic based on source and destination IP address, port, and protocol. Network rules are applied before application rules and have higher priority than application rules. Therefore, if there is a network rule that allows traffic to console.cloud.contoso.com on port 80 or 443, it will override the application rule that denies traffic based on FQDN.
NEW QUESTION # 57
A company uses Azure Backup Agent to back up specific files and folders from an on-premises virtual
machine (VM).
An administrator reports that the backup job is transferring files slowly. You determine that the backup job is
verifying changes in directories by scanning the entire volume.
You need to determine the state of the backup job.
In which state will the backups occur?
Answer:
Explanation:
NEW QUESTION # 58
A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment
includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network.
You need to implement a solution.
Solution: Disable peering on the virtual network.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION # 59
A company attempts to implement just-in-time (JIT) access for a virtual machine (VM) named VM1.
The company reports that they are unable to complete the process.
You need to implement JIT access and test the deployment.
Which PowerShell cmdlets should you run?
Answer:
Explanation:
NEW QUESTION # 60
......
To prepare for the exam, candidates should have a deep understanding of Azure networking concepts and be familiar with troubleshooting tools such as Azure Network Watcher and Azure Monitor. They should also have experience working with Azure PowerShell and Azure CLI to perform troubleshooting tasks.
The New AZ-720 2024 Updated Verified Study Guides & Best Courses: https://examcollection.guidetorrent.com/AZ-720-dumps-questions.html