[Nov-2022 Newly Released] AZ-720 Exam Questions For You To Pass [Q15-Q30]

Rate this post

[Nov-2022 Newly Released] AZ-720 Exam Questions For You To Pass

Microsoft AZ-720 Exam: Basic Questions With Answers

Schedule exam

Languages: English

Retirement date: none

This exam measures your ability to accomplish the following technical tasks: troubleshoot business continuity issues; troubleshoot hybrid and cloud connectivity issues; troubleshoot Platform as a Service issues; troubleshoot authentication and access control issues; troubleshoot networks; and troubleshoot VM connectivity issues.

Exam AZ-720: Troubleshooting Microsoft Azure Connectivity

Candidates for this exam should have experience with networking and with hybrid environments, including knowledge of routing, permissions, and account limits. They must be able to use available tools to diagnose issues related to business continuity, hybrid environments, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), access control, networking, and virtual machines connectivity.

Passing score: 700. Learn more about exam scores.

Part of the requirements for: Microsoft Certified: Azure Support Engineer for Connectivity Specialty

Download exam skills outline

Skills measured

Troubleshoot hybrid and cloud connectivity issues (20–25%)
Troubleshoot networks (25–30%)
Troubleshoot Platform as a Service issues (5–10%)

NO.15 A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site
connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
* OpenVPN for the tunnel type.
* Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?

Reissue the client certificate with client authentication enabled.

Configure preshared key for authentication on the VPN profile.

Install an IKEv2 VPN client on the user’s computers.

Reissue the client certificate with server authentication enabled.

NO.16 A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?

The partner’s VPN device and VNetGW1 are configured using the same shared key.

VNetGW1 has exceeded the subnet Security Association pairs.

The partner’s VPN device and VNetGW1 are configured with the same virtual network address space.

The public IP address of the partner’s VPN device is configured in the local network gateway address space on VNetGW1.

NO.17 A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD
Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Restart the Azure AD Connect service.
Does the solution meet the goal?

Yes

NO.18 A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.
Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2.
You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.
You discover that FlowLog1 is not reporting outbound flow traffic.
You need to resolve the issue with FlowLog1.
What should you do?

Create the storage account for FlowLog1 as a premium block blob.

Create the storage account for FlowLog1 as a premium page blob.

Enable FlowLog1 in a network security group associated with the subnet of VM1.

Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.

NO.19 A company uses Azure Site Recovery (ASR) for a VMware environment that includes the following virtual
machines (VMs):

The company reports that they are unable to configure all of the servers for replication.
You need to evaluate the servers and server roles to determine which servers can be protected.
Which server can you protect by using ASR?

VM1

VM2

VM3

VM4

NO.20 A company uses Azure Active Directory (Azure AD) for authentication. The company synchronizes Azure
AD with an on-premises Active Directory domain.
The company reports that an Azure AD object fails to sync.
You need to determine which objects are not syncing.
Which troubleshooting steps should you use to diagnose the failure?

NO.21 A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
What should you do?

Create a new manual backup in Backup center.

Run chkdsk on the VM.

Configure the retention range of the current backup policy for the VM.

Install the VM guest agent with administrative permissions.

Enable replication and create a recovery plan for the backup vault.

NO.22 A company deploys a new application and places the application behind an Azure Application Gateway Web Application Firewall (WAF).
A user with client IP 203.0.113.26 reports that they cannot access the application.
You need to troubleshoot the issue.
How should you complete the query?

NO.23 A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to
synchronize objects from their Active Directory Domain Services (AD DS) domain.
You observe that AD DS objects are not synchronizing to Azure AD.
You need to verify that the staging mode is enabled.
What should you do?

Review the history for the Azure AD Connect sync scheduled task.

Run this PowerShell cmdlet: Get-ADSyncScheduler

Review the triggers for the Azure AD Connect sync scheduled task.

Run this PowerShell cmdlet: Get-ADSyncConnetorRunStatus

NO.24 A company uses Azure Site Recovery for their on-premises Hyper-V servers. The company manages servers by using System Center Virtual Machine Manager (SCVMM).
An administrator reports that replication to the secondary site has failed.
You need to inspect the SCVMM logs and configuration files.

NO.25 A company connects an on-premises network to an Azure virtual network by using ExpressRoute.
The ExpressRoute connection is experiencing higher than normal latency.
You need to confirm the traffic flow.
How should you complete the PowerShell command?

NO.26 A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft
Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access.
What should you conclude?

The administrator is using the Microsoft Defender for Cloud free tier.

The VMs were provisioned by using a classic deployment.

The administrator does not have the SecurityReader role.

The administrator does not have permissions to request JIT access to the VMs.

NO.27 A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize objects from their Active Directory Domain Services (AD DS) domain.
You observe that AD DS objects are not synchronizing to Azure AD.
You need to verify that the staging mode is enabled.
What should you do?

Review the history for the Azure AD Connect sync scheduled task.

Run this PowerShell cmdlet: Get-ADSyncScheduler

Review the triggers for the Azure AD Connect sync scheduled task.

Run this PowerShell cmdlet: Get-ADSyncConnetorRunStatus

NO.28 A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a
virtual network named contoso-vn in a resource group named contoso-rg.
An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address
from a subnet named default.
You need to resolve the issue.
How should you complete the command?

NO.29 A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Use a global administrator account with a password that is less than 256 characters to configure Azure AD Connect.
Does the solution meet the goal?

Yes

NO.30 A company has an Azure environment that uses one virtual network.
The company restructures the environment to use two different virtual networks. Virtual machines in one network cannot communicate with virtual machines in the other virtual network.
You need to re-establish a connection between virtual machines in the two networks.
How should you configure the networks?