March Sale Special - 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: c4sdisc65

AZ-720 Troubleshooting Microsoft Azure Connectivity Questions and Answers

Question # 6

You need to troubleshoot the Azure Key Vault issues.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 7

You need to troubleshoot the CosmosDB1 issues from the on-premises environment. What should you use?

A.

route command

B.

Network Watcher next hop diagnostic tool

C.

Network Watcher Connection troubleshoot diagnostic tool

D.

nslookup command

Full Access
Question # 8

You need to resolve the issue.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 9

You need to troubleshoot and resolve the reverse DNS lookup issues.

What should you do? To answer, select the appropriate option in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 10

You need to resolve the issue with internet traffic from VM1 being routed directly to the internet.

What should you do?

A.

Modify IP address prefix of RT12

B.

Associate RT12 with Subnet1a.

C.

Associate RT12 with Subnet2a.

D.

Modify the next hop type of RT12.

Full Access
Question # 11

You need to troubleshoot and resolve the reverse VPN connectivity issues.

What should you do? To answer, select the appropriate option in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 12

You need to troubleshoot and resolve the public DNS lookup issues.

What should you do? To answer, select the appropriate option in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 13

You need to troubleshoot and resolve issues reported for contosostorage1.

What should you do? To answer, select the appropriate option in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 14

You need to resolve the VM2 routing issue.

What should you do?

A.

Modify the IP configuration setting of the Azure network interface resource of VM1.

B.

Add a network interface to VM1.

C.

Add a network interface to VM2.

D.

Modify the IP configuration setting of the Azure network interface resource of VM2.

Full Access
Question # 15

You need to troubleshoot the issues with the SharePoint workload in VNet2.

What should you do? To answer, select the appropriate option in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 16

You need to troubleshoot the sales department issues.

How should you configure the system? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 17

A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a virtual network named contoso-vn in a resource group named contoso-rg.

An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address from a subnet named default.

You need to resolve the issue.

How should you complete the command?

AZ-720 question answer

Full Access
Question # 18

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.

The company observes that the VPN disconnects from time to time.

You need to troubleshoot the cause for the disconnections.

What should you verify?

A.

The partner's VPN device and VNetGW1 are configured using the same shared key.

B.

The partner's VPN device is configured for one VPN tunnel per subnet pair.

C.

The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.

D.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

Full Access
Question # 19

A company develops an Azure Cosmos DB solution.

The solution has the following components:

  • A virtual network named VNet1 in a resource group named RG1.
  • A subnet named Subnet1 in VNet1.
  • A Private Link service.

The company is unable to configure a source IP address for the Private Link service from Subnet1.

You need to resolve the issue for Subnet1.

How should you complete the PowerShell commands?

AZ-720 question answer

Full Access
Question # 20

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:

  • OpenVPN for the tunnel type.
  • Azure certificate for the authentication type.

Users receive a certificate mismatch error when connecting by using a VPN client.

You need to resolve the certificate mismatch error.

What should you do?

A.

Reissue the client certificate with client authentication enabled.

B.

Configure preshared key for authentication on the VPN profile.

C.

Install an IKEv2 VPN client on the user's computers.

D.

Reissue the client certificate with server authentication enabled.

Full Access
Question # 21

A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).

An administrator receives an error that password writeback cloud not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:

Error getting auth token

You need to resolve the issue.

Solution: Use a global administrator account that is not federated to configure Azure AD Connect.

Does the solution meet the goal?

A.

Yes

B.

No

Full Access
Question # 22

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.

Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2.

You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.

You discover that FlowLog1 is not reporting outbound flow traffic.

You need to resolve the issue with FlowLog1.

What should you do?

A.

Enable FlowLog1 in a network security group associated with the subnet of VM1.

B.

Configure the FlowTimeoutInMinutes property on VNet2 to a non-null value.

C.

Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.

D.

Configure FlowLog1 for version 2.

Full Access
Question # 23

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.

The company reports that the Azure VM backup job is failing.

You need to troubleshoot the issue.

What should you do?

A.

Create a new manual backup in Backup center.

B.

Run chkdsk on the VM.

C.

Configure the retention range of the current backup policy for the VM.

D.

Install the VM guest agent with administrative permissions.

E.

Enable replication and create a recovery plan for the backup vault.

Full Access
Question # 24

A company uses Azure Backup Agent to back up specific files and folders from an on-premises virtual machine (VM).

An administrator reports that the backup job is transferring files slowly. You determine that the backup job is verifying changes in directories by scanning the entire volume.

You need to determine the state of the backup job.

In which state will the backups occur?

AZ-720 question answer

Full Access
Question # 25

You need to resolve the issue with Admin1.

What should you do?

A.

Configure Azure AD Connect filtering to include the Admins organizational unit.

B.

Reset the Azure AD Connect service account password in AD DS.

C.

Enable security inheritance in Active Directory Domain Services (AD DS).

D.

Start a full import in Azure AD Connect.

Full Access
Question # 26

You need to resolve the connectivity issues for VM1 to Contoso Suites.

What parameters should you configure for each peering connection? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 27

You need to resolve the problem reported by User2.

What should you do?

A.

Enable all users for the self-service password reset feature.

B.

Enable the warehouse group for the self-service password reset feature.

C.

Assign an Azure AD Premium Pi license to User2

D.

Identify and resolve the misconfigured directory information for User2.

E.

Instruct User2 to wait 24 hours and try again.

Full Access
Question # 28

You need to troubleshoot the issues related to VM3.

How should you complete the web link? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 29

You need to troubleshoot the issue with SRV2.

Which PowerShell cmdlet should you run?

A.

Confirm-MsolDomain

B.

Get-MsolDomamFederationSettings

C.

Get-MsolDomamVerificationDns

D.

Get-MsolServicePrincipalCredential

E.

Get-Mousers

Full Access
Question # 30

You need to troubleshoot the issue reported by Blue Yonder Airlines.

Which diagnostic log should you review?

A.

RouteDiagnosticLog

B.

GatewayDiagnosticLog

C.

TunnelDiagnosticLog

D.

IKEDiagnosticLog

Full Access
Question # 31

You need to resolve the issue repotted by Admin2.

What should you do?

A.

Add a rule to N5G2 that allows outbound traffic to the internet over port 80.

B.

Disassociate NSG2 from Subnet12.

C.

Configure a second network interface on VM4.

D.

Disassociate NSG5 from NIC4.

Full Access
Question # 32

You need to troubleshoot issues that scheduling agents report accessing Alpine Ski House resources.

Which tool and port should you test? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 33

You need to troubleshoot the issues reported by Agent1.

What should you review? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access
Question # 34

You need to resolve the issue with VM10.

What should you do?

A.

In the NSG10 inbound security rule that has a priority of 100, change the destination to ASG10

B.

In NSG10, remove the inbound security rule that has a priority of 100.

C.

In the NSG10 inbound security rule that has a priority of 100, change the protocol to Any

D.

Add an outbound security rule to NSG1 that allows outbound traffic from ASG1 to ASG10. Configure the rule to use a priority of 100.

Full Access
Question # 35

You need to troubleshoot the issues reported by User1.

Which commands should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-720 question answer

Full Access