Get Latest AZ-720 Practice Exam To Pass Troubleshooting Microsoft Azure Connectivity

test2022-07-04T06:11:46+00:00

By test AZ-720 free dumps, AZ-720 Practice Exam, AZ-720 questions and answers, Troubleshooting Microsoft Azure Connectivity 0 Comments

AZ-720 exam is the required exam to earn the Microsoft Certified: Azure Support Engineer for Connectivity Specialty certification, which validates your expertise in this area and offers you the opportunity to prove your Azure connectivity troubleshooting skills. FreeTestShare AZ-720 Practice Exam ensures a 100% success rate. You can use the free AZ-720 Practice Exam to familiarize yourself with our product. Our AZ-720 Practice Exam questions are syllabus-based, and we update them according to the real test. It enables you to study for the AZ-720 exam using actual exam questions and pass the first try.

To put your skills to the test, try free AZ-720 practice exam!

Page 1 of 3

1. A company has users in Azure Active Directory (Azure AD). The company enables the users to use Azure AD multi-factor authentication (MFA).

A user named User1 reports they receive the following error while setting up additional security verification settings for MFA:

Sorry! We can't process your request. Your session is invalid or expired. There was an error processing your request because your session is invalid or expired. Please try again.

You need to help the user complete the MFA setup.

What should you do?

From the Microsoft 365 Admin portal, clear the Block this user from signing in option for the user.

Instruct the user to complete the setup process within 10 minutes.

Instruct the user to enter the correct verification code.

Instruct the user to clear their web browser cache.

From the Azure AD portal, reset the user's password.

2. A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.

The company observes that the VPN disconnects from time to time.

You need to troubleshoot the cause for the disconnections.

What should you verify?

The partner's VPN device and VNetGW1 are configured using the same shared key.

VNetGW1 has exceeded the subnet Security Association pairs.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.

3. HOTSPOT

A customer creates an Azure resource group named RG1 in the East US region. RG1 contains the following resources:

The customer performs the following tasks:

- Create a private endpoint for sqlsrv1 in subnet2 with the private IP address of 192.168.2.100.

- Create a private DNS zone named privatelink.database.windows.net by using a single A record named sqlsvr1 and the IP address 192.168.2.100.

- Disable public access by using the public endpoint for sqlsvr1.

The customer reports that connections from VM1 to DB1 are failing. The solution must allow connections from VM1 to DB1 without making platform-level changes.

You need to troubleshoot and resolve the issue.

What should you do?

4. A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).

A new subnet should be unreachable from the on-premises network.

You need to implement a solution.

Solution: Scale the gateway to Generation2.

Does the solution meet the goal?

Yes

5. A company uses Azure Site Recovery (ASR) for a VMware environment that includes the following virtual machines (VMs):

The company reports that they are unable to configure all of the servers for replication.

You need to evaluate the servers and server roles to determine which servers can be protected.

Which server can you protect by using ASR?

VM1

VM2

VM3

VM4

6. A company deploys the Azure Application Gateway Web Application Firewall (WAF) to protect their web applications.

Users in a remote office location report the following issues:

- Unable to access part of a web application.

- Part of the web application is failing to load.

- Parts of the web application has activities that are not performing as expected.

You need to troubleshoot the issue.

Which diagnostic log should you review?

Performance

Firewall

Access

Azure Activity

7. HOTSPOT

A company has an Azure environment that uses one virtual network.

The company restructures the environment to use two different virtual networks. Virtual machines in one network cannot communicate with virtual machines in the other virtual network.

You need to re-establish a connection between virtual machines in the two networks.

How should you configure the networks?

8. A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1.

An administrator configures VNetGW1 for the following:

- OpenVPN for the tunnel type.

- Azure certificate for the authentication type.

Users receive a certificate mismatch error when connecting by using a VPN client.

You need to resolve the certificate mismatch error.

What should you do?

Install an IKEv2 VPN client on the user's computers.

Reissue the client certificate with client authentication enabled.

Create a profile manually, add the server FQDN and reissue the client certificate.

Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.

9. HOTSPOT

A company named Contoso connects its on-premises resources to Azure by using ExpressRoute.

An administrator reports that the circuit is in a failed state.

You need to resolve the issue.

How should you complete the PowerShell commands?

10. HOTSPOT

A company uses public Azure DNS zones.

The company reports DNS record creation and name resolution issues.

You need to troubleshoot the issues.

What are the causes of the issues?

Page 2 of 3

11. HOTSPOT

A company connects an on-premises network to an Azure virtual network by using ExpressRoute.

The ExpressRoute connection is experiencing higher than normal latency.

You need to confirm the traffic flow.

How should you complete the PowerShell command?

12. A company hosts a network virtual appliance (VNA) and Azure Route Server in different virtual networks (VNets). Border Gateway Protocol (BGP) peering is enabled between the NVA loses internet connectivity after it advertises the default route to the route server.

You need to resolve the problem with the NVA.

What should you do?

Configure a user-defined route on the NVA subnet.

Move the route server to the same VNet as the NV

Configure a unique autonomous system number (ASN) on the NV

Configure a public IP address on the route server.

13. A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.

The company observes that the VPN disconnects from time to time.

You need to troubleshoot the cause for the disconnections.

What should you verify?

The partner's VPN device and VNetGW1 are configured using the same shared key.

The partner's VPN device is configured for one VPN tunnel per subnet pair.

The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

14. HOTSPOT

A company has an Azure Active Directory (Azure AD) tenant. You are assigned the Owner role-based access control (RBAC) role of an Azure resource group named RG1.

An administrator grants a user named User1 the Contributor RBAC role for RG1. User1 receives an authorization error when attempting to create a Cosmos DB account in RG1.

The administrator verifies that they can create a Cosmos DB account in RG1.

You need to troubleshoot the issue.

What should you do?

15. A company has two virtual networks (VNets) that reside in the same Azure region.

An administrator reports that virtual machines (VMs) in each VNet are unable to connect to VMs in the other VNet.

You need to configure a connection between the two networks that maximizes throughput and minimizes latency.

What should you do?

Configure a VPN gateway.

Create a site-to-site VPN connection.

Configure virtual network peering.

Create a point-to-site VPN connection.

16. A customer has an Azure Virtual Network named VNet1 that contains an internal standard SKU load balancer named LB1. The backend pool for LB1 includes the following virtual machines: VM1, VM2.

The customer configures a rule named Rul1 to load balance incoming HTTPS requests for VM1 and VM2. Rule1 is associated with an HTTPS health probe. The path for the probe is set to /.

The network adapters of VM1 and VM2 are associated with a network security named NSG1 that contains the following rules:

You connect to https://VM1 and https://VM2 from VNet1. Attempts to connect using the front-end IP address of LB1 are failing.

You need to resolve the issue.

What should you do?

Change the health probe associated with Rule1 to use HTT

Add an NSG1 rule with the source set to VirtualNetwork.

Change the health probe associated with Rule1 to use TC

Add an NSG1 rule with the source set to AzureLoadBalancer.

17. A company uses Azure Site Recovery (ASR) to replicate and recover Azure virtual machines (VM) between Azure regions.

An administrator receives the following warning from ASR about a VM that uses P10 disks: Data change rate beyond supported limits

You add OS Disk Write Bytes/Sec and Data Disk Write Bytes/Sec to the list of metrics for monitoring. You discover that the VM consistently has a data churn of greater than 8 MB/s but less than 10 MB/s.

You need to resolve the issue.

What should you do?

Uninstall the Volume Shadow Copy Service (VSS) Provider service.

Use AzCopy to upload data to a cache storage account.

Create a network service endpoint in a virtual network.

Upgrade the target storage disk.

18. A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).

A new subnet should be unreachable from the on-premises network.

You need to implement a solution.

Solution: Configure subnet delegation.

Does the solution meet the goal?

Yes

19. DRAG DROP

A company has an Azure virtual network (VNet). An administrator creates a subet in the VNet named AzureSastionSubnet. The administrator deploys Azure Bastion to AzureBastionSubnet.

The administrator creates a default network security group named nsg-Bastion. The following error message display when the administrator attempts to assign nsg-Bastion to AzureBastionSubnet:

Network security group nsg-Bastion does not have necessary rules for Azure Bastion Subnet AzureBastionSubnet

You need to resolve the issues with the inbound security rules.

Which port or set of ports should you configure?

20. HOTSPOT

A company uses Azure Site Recovery for their on-premises Hyper-V servers. The company manages servers by using System Center Virtual Machine Manager (SCVMM).

An administrator reports that replication to the secondary site has failed.

You need to inspect the SCVMM logs and configuration files.

Which PowerShell cmdlets should you use?

Page 3 of 3

21. HOTSPOT

A company uses an Azure VPN gateway with an IP address of 203.0.113.20.

Users report that the VPN connection frequently drops.

You need to determine when each connection failure occurred.

How should you complete the Azure Monitor query?