AZ-720 by Microsoft Actual Free Exam Questions And Answers [UPDATED 2022]
AZ-720 Questions Truly Valid For Your Microsoft Exam!
Skills measured
- Troubleshoot authentication and access control issues (15–20%)
- Troubleshoot VM connectivity issues (5–10%)
- Troubleshoot business continuity issues (5–10%)
NEW QUESTION 24
A company uses Azure Active Directory (Azure AD) for authentication. The company synchronizes Azure AD with an on-premises Active Directory domain.
The company reports that an Azure AD object fails to sync.
You need to determine which objects are not syncing.
Which troubleshooting steps should you use to diagnose the failure?
Answer:
Explanation:
NEW QUESTION 25
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Enable replication and create a recovery plan for the backup vault.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: B
NEW QUESTION 26
A company plans to use an Azure PaaS service by using Azure Private Link service. The azure Private Link
service and an endpoint have been configured.
The company reports that the endpoint is unable to connect to the service.
You need to resolve the connectivity issue.
What should you do?
- A. Approve the connection state.
- B. Disable the endpoint network policies.
- C. Disable the service network policies.
- D. Validate the VPN device.
Answer: C
NEW QUESTION 27
A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access.
What should you conclude?
- A. The VMs were provisioned by using a classic deployment.
- B. The VMs were recently provisioned by using an Azure Resource Manager deployment.
- C. The administrator does not have the SecurityReader role.
- D. The administrator is using the Microsoft Defender for Cloud free tier.
Answer: A
NEW QUESTION 28
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site
connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
* OpenVPN for the tunnel type.
* Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.
- B. Configure preshared key for authentication on the VPN profile.
- C. Create a profile manually, add the server FQDN and reissue the client certificate.
- D. Install a Secure Socket Tunneling Protocol (SSTP) VPN client on the user's computers.
Answer: C
NEW QUESTION 29
A company uses an Azure blob container.
The IT department has a service-level agreement (SLA) that requests on average cannot exceed 20
milliseconds.
You need to implement a log analytics query to generate the SLA report.
How should you complete the query?
Answer:
Explanation:
NEW QUESTION 30
A company deploys a new application and places the application behind an Azure Application Gateway Web Application Firewall (WAF).
A user with client IP 203.0.113.26 reports that they cannot access the application.
You need to troubleshoot the issue.
How should you complete the query?
Answer:
Explanation:
NEW QUESTION 31
A company uses Azure Site Recovery for their on-premises Hyper-V servers. The company manages servers
by using System Center Virtual Machine Manager (SCVMM).
An administrator reports that replication to the secondary site has failed.
You need to inspect the SCVMM logs and configuration files.
Which PowerShell cmdlets should you use?
Answer:
Explanation:
NEW QUESTION 32
A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?
- A. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
- B. The partner's VPN device is configured for one VPN tunnel per subnet pair.
- C. The partner's VPN device and VNetGW1 are configured using the same shared key.
- D. The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.
Answer: C
NEW QUESTION 33
A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network.
You need to implement a solution.
Solution: Configure a route table with route propagation disabled.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 34
A company has an Azure tenant. The company deploys an Azure firewall named FW1 to control access from an on-premises datacenter to an Azure virtual machine named VM1.
The company troubleshoots ICMP connectivity from the on-premises datacenter to VM1. You are unable to ping VM1 from an on-premises server.
You need to determine if ICMP connectivity to VM1 is allow on FW1.
What should you do?
- A. Use the ping command targeting the fully qualified domain name of VM1 and review the command's response.
- B. Use the ping command targeting the IP address of VM1 and review the command's response.
- C. Use the ping command targeting the IP address of VM1 and review the Infrastructure rules log of FW1.
- D. Use the ping command targeting the IP address of VM1 and review the Network rules log of FW1.
Answer: B
NEW QUESTION 35
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Configure the retention range for the current VM backup policy.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: B
NEW QUESTION 36
A company uses Azure Site Recovery for their on-premises Hyper-V servers. The company manages servers by using System Center Virtual Machine Manager (SCVMM).
An administrator reports that replication to the secondary site has failed.
You need to inspect the SCVMM logs and configuration files.
Answer:
Explanation:
NEW QUESTION 37
A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.
Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2.
You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.
You discover that FlowLog1 is not reporting outbound flow traffic.
You need to resolve the issue with FlowLog1.
What should you do?
- A. Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.
- B. Enable FlowLog1 in a network security group associated with the subnet of VM1.
- C. Create the storage account for FlowLog1 as a premium block blob.
- D. Create the storage account for FlowLog1 as a premium page blob.
Answer: D
NEW QUESTION 38
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD
Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Restart the Azure AD Connect service.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 39
A company plans to implement ExpressRoute by using the provider connectivity model.
The company creates an ExpressRoute circuit. You are unable to connect to resources through the circuit.
You need to determine the provisioning state of the service provider.
Which PowerShell cmdlet should you run?
- A. Get-AzExpressRouteCircuitConnectionConfig
- B. Get-AzExpressRouteCircuitARPTable
- C. Get-AzExpressRouteCircuitRouteTable
- D. Get-AzExpressRouteCircuit
- E. Get-AzExpressRouteCircuitPeeringConfig
Answer: A
NEW QUESTION 40
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Install the VM guest agent by using administrative permissions.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 41
A company has an Azure point-to-site virtual private network (VPN) that uses certificate-based authentication.
A user reports that the following error message when they try to connect to the VPN by using a VPN client on
a Windows 11 machine:
A certificate could not be found
You need to resolve the issue.
Which three actions should you perform?
- A. Enable Azure AD authentication on the gateway
- B. Install a client certificate on the VPN gateway.
- C. Generate a root certificate.
- D. Install a root certificate on the user's device.
- E. Generate a client certificate.
- F. Install a client certificate on the user's device.
- G. Configure an Azure Active Directory (Azure AD) tenant.
Answer: A,C,G
NEW QUESTION 42
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Enable replication and create a recovery plan for the backup vault.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: B
NEW QUESTION 43
A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access.
What should you conclude?
- A. The administrator does not have permissions to request JIT access to the VMs.
- B. The VMs were provisioned by using a classic deployment.
- C. The administrator does not have the SecurityReader role.
- D. The administrator is using the Microsoft Defender for Cloud free tier.
Answer: B
NEW QUESTION 44
A company deploys an Azure Firewall. The company reports the following log entry:
For each of the following questions, select Yes or No.
Answer:
Explanation:
NEW QUESTION 45
A company uses an Azure VPN gateway to connect to their on-premises environment.
The company's on-premises VPN gateway is used by several services. One service is experiencing connectivity issues.
You need to minimize downtime for all services and resolve the connectivity issue.
Which three actions should you perform?
- A. Configure the hashing algorithm to be different on both gateways.
- B. Configure the pre-shared key to be the same on the Azure VPN gateway and the on-premises VPN gateways.
- C. Rest the VPN gateway.
- D. Rest the VPN connection.
- E. Configure the hashing algorithm to be the same on both gateways.
- F. Configure the pre-shared key to be different on the Azure VPN gateway and the on-premises VPN gateways.
Answer: B,E,F
NEW QUESTION 46
A company configures an Azure site-to-site VPN between an on-premises network and an Azure virtual
network.
The company reports that after completing the configuration, the VPN connection cannot be established.
You need to troubleshoot the connection issue.
What should you do first?
- A. Verify the AzureRoot.cer file exists.
- B. Verify the AzureClient.pfx file exists.
- C. Identify the shared key by running this PowerShell cmdlet:
Get-AzVirtualNetworkGatewayConnectionSharedKey. - D. Identify the shared key by running this PowerShell cmdlet:
Get-AzVirtualNetworkGatewayConnectionVpnDeviceConfigScript.
Answer: D
NEW QUESTION 47
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
What should you do?
- A. Run chkdsk on the VM.
- B. Configure the retention range of the current backup policy for the VM.
- C. Create a new manual backup in Backup center.
- D. Install the VM guest agent with administrative permissions.
- E. Enable replication and create a recovery plan for the backup vault.
Answer: D
NEW QUESTION 48
......
Microsoft AZ-720 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
Schedule exam
Languages: English
Retirement date: none
This exam measures your ability to accomplish the following technical tasks: troubleshoot business continuity issues; troubleshoot hybrid and cloud connectivity issues; troubleshoot Platform as a Service issues; troubleshoot authentication and access control issues; troubleshoot networks; and troubleshoot VM connectivity issues.
Get instant access of 100% real exam questions with verified answers: https://www.torrentvalid.com/AZ-720-valid-braindumps-torrent.html
AZ-720 Actual Questions - Instant Download Tests Free Updated Today!: https://drive.google.com/open?id=1Sc8VWNOV5V3VxZ-QjbdfQTi4SSLakkPf