Instant Download Microsoft: AZ-720 Free Updated Test Dumps
Valid AZ-720 FREE EXAM DUMPS QUESTIONS & ANSWERS
NEW QUESTION # 48
A company uses Azure Site Recovery for an on-premises server.
The company reports that replication of the server to Azure has failed.
You need to inspect the logs on the server to troubleshoot the issue.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 49
A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize users from an Active Directory Domain Services (AD DS).
The synchronization of a user object is failing.
You need to troubleshoot the failing synchronization by using a built-in Azure AD Connect troubleshooting task.
Which two pieces of information should you collect before you start troubleshooting?
- A. Azure AD connector name
- B. AD connector name
- C. Object globally unique identifier
- D. Object common name
- E. Object distinguished name
Answer: B,E
Explanation:
the two pieces of information that should be collected before starting to troubleshoot the failing synchronization by using a built-in Azure AD Connect troubleshooting task are: B. AD connector name E. Object distinguished name Azure AD Connect is a tool used to synchronize users from an on-premises Active Directory Domain Services (AD DS) to Azure AD. When troubleshooting synchronization issues, it is important to have information about the object that is failing to synchronize. The AD connector name refers to the name of the connector used to connect to the on-premises AD DS. The object distinguished name refers to the unique identifier of the object in the on-premises AD DS. Having this information can help identify and resolve synchronization issues.
NEW QUESTION # 50
A company has an Azure tenant. The company deploys an Azure Firewall named FW1 using the Standard
SKU. You configure FW1 using classic firewall rules.
The company creates an application rule collection with the following settings:
Priority: 100
Action: Deny
Rule type: FQDN
Source type: IP address
Source: *
Protocol: http:80,https:443
Target FQDN: *.cloud.contoso.com
An engineer observes that traffic to console.cloud.conotoso.com is still allowed by FW1.
You need to determine why the traffic is allowed.
What should you review?
- A. Infrastructure rules
- B. Network rules
- C. Application rules
- D. Web categories
Answer: A
NEW QUESTION # 51
A company plans to use an Azure PaaS service by using Azure Private Link service. The azure Private Link service and an endpoint have been configured.
The company reports that the endpoint is unable to connect to the service.
You need to resolve the connectivity issue.
What should you do?
- A. Validate the VPN device.
- B. Disable the endpoint network policies.
- C. Approve the connection state.
- D. Disable the service network policies.
Answer: D
NEW QUESTION # 52
You need to resolve the connectivity issue with the on-premises database named CosmosDB1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 53
A company deploys the Azure Application Gateway Web Application Firewall (WAF) to protect their web applications.
Users in a remote office location report the following issues:
Unable to access part of a web application.
Part of the web application is failing to load.
Parts of the web application has activities that are not performing as expected.
You need to troubleshoot the issue.
Which diagnostic log should you review?
- A. Performance
- B. Firewall
- C. Azure Activity
- D. Access
Answer: B
Explanation:
To troubleshoot the issue, you should review the Firewall diagnostic log. According to 2, Azure Application Gateway Web Application Firewall (WAF) logs requests that are logged through either detection or prevention mode of an application gateway that is configured with WAF. You can use this log to view and analyze blocked requests and identify false positives or false negatives.
NEW QUESTION # 54
A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a
partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?
- A. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
- B. The partner's VPN device is configured for one VPN tunnel per subnet pair.
- C. The public IP address of the partner's VPN device is configured in the local network gateway address
space on VNetGW1. - D. The partner's VPN device and VNetGW1 are configured using the same shared key.
Answer: D
NEW QUESTION # 55
A company uses an Azure VPN gateway to connect to their on-premises environment.
The company's on-premises VPN gateway is used by several services. One service is experiencing
connectivity issues.
You need to minimize downtime for all services and resolve the connectivity issue.
Which three actions should you perform?
- A. Configure the pre-shared key to be the same on the Azure VPN gateway and the on-premises VPN
gateways. - B. Configure the hashing algorithm to be different on both gateways.
- C. Configure the hashing algorithm to be the same on both gateways.
- D. Rest the VPN gateway.
- E. Rest the VPN connection.
- F. Configure the pre-shared key to be different on the Azure VPN gateway and the on-premises VPN gateways.
Answer: A,C,F
NEW QUESTION # 56
You need to troubleshoot the issues related to VM3.
How should you complete the web link? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 57
A company uses public Azure DNS zones.
The company reports DNS record creation and name resolution issues.
You need to troubleshoot the issues.
What are the causes of the issues?
Answer:
Explanation:
NEW QUESTION # 58
A company deploys ExpressRoute.
The company reports that there is an autonomous system (AS) number mismatch.
You need to identify the AS number of the circuit.
Which PowerShell cmdlet should you run?
- A. Get-AzExpressRouteCircuitStats
- B. Get-AzExpressRouteCircuitPeeringConfig
- C. Get-AzExpressRouteCircuit
- D. Get-AzExpressRouteCircuitRouteTable
Answer: C
Explanation:
To identify the AS number of the circuit when there is an autonomous system (AS) number mismatch in ExpressRoute, you should run the Get-AzExpressRouteCircuit PowerShell cmdlet. Therefore, option D is correct. You should run the Get-AzExpressRouteCircuit PowerShell cmdlet.
NEW QUESTION # 59
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Enable replication and create a recovery plan for the backup vault.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: A
NEW QUESTION # 60
A company hosts a network virtual appliance (VNA) and Azure Route Server in different virtual networks
(VNets). Border Gateway Protocol (BGP) peering is enabled between the NVA loses internet connectivity
after it advertises the default route to the route server.
You need to resolve the problem with the NVA.
What should you do?
- A. Move the route server to the same VNet as the NVA.
- B. Configure a public IP address on the route server.
- C. Configure a unique autonomous system number (ASN) on the NVA.
- D. Configure a user-defined route on the NVA subnet.
Answer: C
NEW QUESTION # 61
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Disable password writeback and then enable password writeback.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION # 62
A company has users in Azure Active Directory (Azure AD). The company enables the users to use Azure AD multi-factor authentication (MFA).
A user named User1 reports they receive the following error while setting up additional security verification settings for MFA:
Sorry! We can't process your request. Your session is invalid or expired. There was an error processing your request because your session is invalid or expired. Please try again.
You need to help the user complete the MFA setup.
What should you do?
- A. Instruct the user to enter the correct verification code.
- B. Instruct the user to clear their web browser cache.
- C. From the Azure AD portal, reset the user's password.
- D. Instruct the user to complete the setup process within 10 minutes.
- E. From the Microsoft 365 Admin portal, clear the Block this user from signing in option for the user.
Answer: B
Explanation:
this error can occur when there are issues with cookies or cached data in the web browser. To resolve this issue, you can instruct the user to clear their web browser cache and try again.
NEW QUESTION # 63
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Reissue the client certificate with client authentication enabled.
- B. Reissue the client certificate with server authentication enabled.
- C. Configure preshared key for authentication on the VPN profile.
- D. Install an IKEv2 VPN client on the user's computers.
Answer: B
NEW QUESTION # 64
A company implements self-service password reset (SSPR).
After a firewall upgrade at the company's datacenter, SSPR stops working.
You need to resolve the issue.
Which two URLs must be present on the firewalls to allow SSPR to connect?
- A. *.adl.windows.com
- B. *.svc.ms
- C. *.update.microsoft.com
- D. *.servicebus.windows.net
- E. *.passwordreset. microsoftonline.com
Answer: D,E
Explanation:
Self-service password reset (SSPR) is a feature in Azure Active Directory (Azure AD) that allows users to reset their passwords on their own. To ensure that SSPR works correctly, certain URLs must be accessible from the user's network. These URLs include *.passwordreset.microsoftonline.com and *.svc.ms, which are used for SSPR authentication and service communications.
NEW QUESTION # 65
A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a virtual network named contoso-vn in a resource group named contoso-rg.
An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address from a subnet named default.
You need to resolve the issue.
How should you complete the command?
Answer:
Explanation:
NEW QUESTION # 66
You manage an Azure subscription that contains the following resources:
An on-premises environment is connected to VNet1 by using ERGW1.
An on-premises environment is connected to VNet1 by using ERGW1.
An administrator measures network latency for on-premises traffic that targets VM1 and VM2 by using the front-end IP address of the load balancer. The administrator enables ExpressRoute FastPath on ERGW1 and observes that the latency has not changed.
You need to resolve the issue that is preventing the network latency improvements offered by ExpressRoute FastPath from taking effect.
What should you do?
- A. Redeploy the load balancer as a Standard SKU.
- B. Enable accelerated networking on VM1 and VM2
- C. Change the SKU for the ExpressRoute gateway.
- D. Resize VM1 and VM2.
Answer: A
Explanation:
To resolve the issue that is preventing the network latency improvements offered by ExpressRoute FastPath from taking effect, you should redeploy the load balancer as a Standard SKU. ExpressRoute FastPath is only supported on Standard Load Balancer SKUs. So the correct answer is A. Redeploy the load balancer as a Standard SKU.
NEW QUESTION # 67
A company named Contoso connects its on-premises resources to Azure by using ExpressRoute.
An administrator reports that the circuit is in a failed state.
You need to resolve the issue.
How should you complete the PowerShell commands?
Answer:
Explanation:
NEW QUESTION # 68
A company deploys an Azure Firewall. The company reports the following log entry:
For each of the following questions, select Yes or No.
Answer:
Explanation:
NEW QUESTION # 69
A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft
Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access.
What should you conclude?
- A. The administrator is using the Microsoft Defender for Cloud free tier.
- B. The administrator does not have the SecurityReader role.
- C. The client firewall does not allow port 22 on the VMs.
- D. A network security group is not associated with the VMs.
Answer: C
NEW QUESTION # 70
......
Free AZ-720 Exam Braindumps Microsoft Pratice Exam: https://www.vcetorrent.com/AZ-720-valid-vce-torrent.html
Practice Test for AZ-720 Certification Real 2024 Mock Exam: https://drive.google.com/open?id=1IOmfKK1mr2ejn78YoZGk-777NLt88rrb