A company configures an Azure site-to-site VPN between an on-premises network and an Azure virtual network. The company reports that after completing the configuration, the VPN connection cannot be established. You need to troubleshoot the connection issue.What should you do first?

Identify the shared key by running this PowerShell cmdlet: Get-AzVirtualNetworkGatewayConnectionSharedKey.

Identify the shared key by running this PowerShell cmdlet: Get-AzVirtualNetworkGatewayConnectionVpnDeviceConfigScript.

Verify the AzureRoot.cer file exists.

Verify the AzureClient.pfx file exists.

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-tosite connectivity on VNetGW1. An administrator configures VNetGW1 for the following:OpenVPN for the tunnel type.Azure certificate for the authentication type.Users receive a certificate mismatch error when connecting by using a VPN client.You need to resolve the certificate mismatch error.What should you do?

Reissue the client certificate with client authentication enabled.

Create a profile manually, add the server FQDN and reissue the client certificate.

Reissue the client certificate with server authentication enabled.

Install an IKEv2 VPN client on the user's computers.

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-tosite connectivity on VNetGW1. An administrator configures VNetGW1 for the following:OpenVPN for the tunnel type.Azure certificate for the authentication type.Users receive a certificate mismatch error when connecting by using a VPN client.You need to resolve the certificate mismatch error.What should you do?

Create a profile manually, add the server FQDN and reissue the client certificate.

Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.

Create a profile manually, add the server FQDN and reissue the client certificate.

Install a Secure Socket Tunneling Protocol (SSTP) VPN client on the user's computers.

Configure preshared key for authentication on the VPN profile.

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-tosite connectivity on VNetGW1. An administrator configures VNetGW1 for the following:OpenVPN for the tunnel type.Azure certificate for the authentication type.Users receive a certificate mismatch error when connecting by using a VPN client.You need to resolve the certificate mismatch error.What should you do?

Reissue the client certificate with client authentication enabled.

Install an IKEv2 VPN client on the user's computers.

Reissue the client certificate with client authentication enabled.

Create a profile manually, add the server FQDN and reissue the client certificate.

Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-tosite connectivity on VNetGW1. An administrator configures VNetGW1 for the following:OpenVPN for the tunnel type.Azure certificate for the authentication type.Users receive a certificate mismatch error when connecting by using a VPN client.You need to resolve the certificate mismatch error.What should you do?

Reissue the client certificate with client authentication enabled.

Configure preshared key for authentication on the VPN profile.

Install an IKEv2 VPN client on the user's computers.

Reissue the client certificate with server authentication enabled.

A company hosts a network virtual appliance (VNA) and Azure Route Server in different virtual networks (VNets). Border Gateway Protocol (BGP) peering is enabled between the NVA loses internet connectivity after it advertises the default route to the route server.You need to resolve the problem with the NVA.What should you do?

Configure a unique autonomous system number (ASN) on the NVA.

Configure a user-defined route on the NVA subnet.

Move the route server to the same VNet as the NVA.

Configure a unique autonomous system number (ASN) on the NVA.

Configure a public IP address on the route server.

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2. You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.You discover that FlowLog1 is not reporting outbound flow traffic.You need to resolve the issue with FlowLog1.What should you do?

Configure FlowLog1 for version 2.

Create the storage account for FlowLog1 as a premium block blob.

Configure the FlowTimeoutInMinutes property on VNet2 to a non-null value.

Enable FlowLog1 in a network security group associated with the network interface of VM1.

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2. You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.You discover that FlowLog1 is not reporting outbound flow traffic.You need to resolve the issue with FlowLog1.What should you do?

Enable FlowLog1 in a network security group associated with the subnet of VM1.

Configure the FlowTimeoutInMinutes property on VNet2 to a non-null value.

Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.

Configure FlowLog1 for version 2.

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2. You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.You discover that FlowLog1 is not reporting outbound flow traffic.You need to resolve the issue with FlowLog1.What should you do?

Enable FlowLog1 in a network security group associated with the subnet of VM1.

Create the storage account for FlowLog1 as a premium block blob.

Create the storage account for FlowLog1 as a premium page blob.

Enable FlowLog1 in a network security group associated with the subnet of VM1.

Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.

A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active Directory Domain Services (Azure AD DS) instance. Users report that they are unable to sign into Azure AD DS after being provisioned from Azure AD.You verify the user accounts exist in Azure AD DS.You need to resolve the issue.What should you do?

Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable Azure AD DS again.

Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS again.

Instruct the users to change their password in Azure AD.

A company has users in Azure Active Directory (Azure AD). The company enables the users to use Azure AD multi-factor authentication (MFA). A user named User1 reports they receive the following error while setting up additional security verification settings for MFA:Sorry! We can't process your request. Your session is invalid or expired. There was an error processing your request because your session is invalid or expired. Please try again. You need to help the user complete the MFA setup.What should you do?

Instruct the user to complete the setup process within 10 minutes.

From the Microsoft 365 Admin portal, clear the Block this user from signing in option for the user.

Instruct the user to complete the setup process within 10 minutes.

Instruct the user to enter the correct verification code.

Instruct the user to clear their web browser cache.

From the Azure AD portal, reset the user's password.

A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize objects from their Active Directory Domain Services (AD DS) domain. You observe that AD DS objects are not synchronizing to Azure AD.You need to verify that the staging mode is enabled.What should you do?

Run this PowerShell cmdlet: Get-ADSyncScheduler

Review the history for the Azure AD Connect sync scheduled task.

Run this PowerShell cmdlet: Get-ADSyncScheduler

Review the triggers for the Azure AD Connect sync scheduled task.

Run this PowerShell cmdlet: Get-ADSyncConnetorRunStatus

A company has on-premises application server that runs in System Center Virtual Machine Manager (SCVMM). The company configures Azure Site Recovery.An administrator at the company reports that they receive an error message. The error message indicates that there are replication issues. You need to troubleshoot the issue.Which log should you review?

Network Security Group flow log

A company uses Azure Site Recovery (ASR) to replicate and recover Azure virtual machines (VM) between Azure regions. An administrator receives the following warning from ASR about a VM that uses P10 disks: Data change rate beyond supported limits You add OS Disk Write Bytes/Sec and Data Disk Write Bytes/Sec to the list of metrics for monitoring. You discover that the VM consistently has a data churn of greater than 8 MB/s but less than 10 MB/s.You need to resolve the issue.What should you do?

Upgrade the target storage disk.

Uninstall the Volume Shadow Copy Service (VSS) Provider service.

Use AzCopy to upload data to a cache storage account.

Create a network service endpoint in a virtual network.

Upgrade the target storage disk.

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal. The company reports that the Azure VM backup job is failing.You need to troubleshoot the issue.What should you do?

Install the VM guest agent with administrative permissions.

Create a new manual backup in Backup center.

Configure the retention range of the current backup policy for the VM.

Install the VM guest agent with administrative permissions.

Enable replication and create a recovery plan for the backup vault.

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal. You need to determine why some VMs are not supported for JIT VM access.What should you conclude?

The VMs were provisioned by using a classic deployment.

The administrator is using the Microsoft Defender for Cloud free tier.

The VMs were provisioned by using a classic deployment.

The VMs were recently provisioned by using an Azure Resource Manager deployment.

The administrator does not have the SecurityReader role.

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal. You need to determine why some VMs are not supported for JIT VM access.What should you conclude?

The VMs were provisioned by using a classic deployment.

The administrator is using the Microsoft Defender for Cloud free tier.

The VMs were provisioned by using a classic deployment.

The administrator does not have the SecurityReader role.

The administrator does not have permissions to request JIT access to the VMs.

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal. You need to determine why some VMs are not supported for JIT VM access.What should you conclude?

The administrator is using the Microsoft Defender for Cloud free tier.

The administrator does not have the SecurityReader role.

The administrator is using the Microsoft Defender for Cloud free tier.

The client firewall does not allow port 22 on the VMs.

A network security group is not associated with the VMs.

A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR). An administrator receives an error that password writeback could not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:Error getting auth tokenYou need to resolve the issue.What should you do?

Restart the Azure AD Connect service.

Configure Azure AD Connect using a global administrator account that is not federated.

Configure Azure AD Connect using a global administrator account with a password that is less than 256 characters.

Disable password writeback and then enable password writeback using the Azure AD Connect configuration.

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VPN disconnects from time to time.You need to troubleshoot the cause for the disconnections.What should you verify?

The IP address of the local network gateway matches the partner's VPN device.

The partner's VPN device and VNetGW1 are configured using the same shared key.

The IP address of the local network gateway matches the partner's VPN device.

The partner's VPN device is enabled for Perfect forward secrecy.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VPN disconnects from time to time.You need to troubleshoot the cause for the disconnections.What should you verify?

The partner's VPN device and VNetGW1 are configured using the same shared key.

VNetGW1 has exceeded the subnet Security Association pairs.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VPN disconnects from time to time.You need to troubleshoot the cause for the disconnections.What should you verify?

The partner's VPN device is configured for one VPN tunnel per subnet pair.

The partner's VPN device and VNetGW1 are configured using the same shared key.

The partner's VPN device is configured for one VPN tunnel per subnet pair.

The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

A company deploys ExpressRoute.The company reports that there is an autonomous system (AS) number mismatch.You need to identify the AS number of the circuit.Which PowerShell cmdlet should you run?

Get-AzExpressRouteCircuitPeeringConfig

Get-AzExpressRouteCircuitRouteTable

A company has two virtual networks (VNets) that reside in the same Azure region.An administrator reports that virtual machines (VMs) in each VNet are unable to connect to VMs in the other VNet. You need to configure a connection between the two networks that maximizes throughput and minimizes latency. What should you do?

Configure virtual network peering.

Create a site-to-site VPN connection.

Configure virtual network peering.

Create a point-to-site VPN connection.

A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure. The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are expected to sustain 300 Mbps. You need to ensure that the VMs are compatible with Azure.Which change should you make?

Redeploy the VM with Accelerated Networking enabled.

Install a kernel name that ends with -azure.

Configure the network interfaces to 1000 Mbps/full duplex.

Redeploy the VM with Accelerated Networking enabled.

Increase the TCP buffers and window size kernel parameters.

A company deploys a new file sharing application on four Standard_D2_v3 virtual machines (VMs) behind an Azure Load Balancer. The company implements Azure Firewall. Users report that the application is slow during peak usage periods. An engineer reports that the peak usage for each VM is approximately 1 Gbps. You need to implement a solution that support a minimum of 10 Gbps.What should you do to increase the throughput?

Increase the size of the VM instance.

Request an increase in networking quotas.

Increase the size of the VM instance.

Disable the Azure Firewall and implement network security groups in its place.

Move two of the servers behind a separate load balancer and configure round robin routing in Traffic Manager.

A company has an Azure tenant. The company deploys an Azure firewall named FW1 to control access from an on-premises datacenter to an Azure virtual machine named VM1. The company troubleshoots ICMP connectivity from the on-premises datacenter to VM1. You are unable to ping VM1 from an on-premises server. You need to determine if ICMP connectivity to VM1 is allow on FW1.What should you do?

Use the ping command targeting the IP address of VM1 and review the Network rules log of FW1.

Use the ping command targeting the IP address of VM1 and review the Infrastructure rules log of FW1.

Use the ping command targeting the IP address of VM1 and review the command's response.

Use the ping command targeting the IP address of VM1 and review the Network rules log of FW1.

Use the ping command targeting the fully qualified domain name of VM1 and review the command's response.

A customer has an Azure Virtual Network named VNet1 that contains an internal standard SKU load balancer named LB1. The backend pool for LB1 includes the following virtual machines: VM1, VM2. The customer configures a rule named Rul1 to load balance incoming HTTPS requests for VM1 andVM2. Rule1 is associated with an HTTPS health probe. The path for the probe is set to /. The network adapters of VM1 and VM2 are associated with a network security named NSG1 that contains the following rules: You connect to https://VM1 and https://VM2 from VNet1. Attempts to connect using the front-end IP address of LB1 are failing. You need to resolve the issue.What should you do?

Add an NSG1 rule with the source set to AzureLoadBalancer.

Change the health probe associated with Rule1 to use HTTP.

Add an NSG1 rule with the source set to VirtualNetwork.

Change the health probe associated with Rule1 to use TCP.

Add an NSG1 rule with the source set to AzureLoadBalancer.

A company uses an Azure VPN gateway to connect to their on-premises environment.The company's on-premises VPN gateway is used by several services. One service is experiencing connectivity issues. You need to minimize downtime for all services and resolve the connectivity issue.Which three actions should you perform?

Configure the pre-shared key to be the same on the Azure VPN gateway and the on-premises VPN gateways.

Configure the hashing algorithm to be the same on both gateways.

Configure the hashing algorithm to be different on both gateways.

Configure the pre-shared key to be the same on the Azure VPN gateway and the on-premises VPN gateways.

Configure the hashing algorithm to be the same on both gateways.

Configure the pre-shared key to be different on the Azure VPN gateway and the on-premises VPN gateways.

Microsoft AZ-720 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

A company plans to use an Azure PaaS service by using Azure Private Link service. The azure Private Link service and an endpoint have been configured. The company reports that the endpoint is unable to connect to the service.

You need to resolve the connectivity issue.

What should you do?

Disable the endpoint network policies.

Validate the VPN device.

Approve the connection state.

Disable the service network policies.

Comment (0)

Microsoft AZ-720 Practice Test 2

Question

Microsoft AZ-720 Practice Tests

Practice Tests