Home / Microsoft / AZ-720

Microsoft AZ-720 Practice Test - Questions Answers, Page 10

Question list

List of questions

Question 91

(0)

HOTSPOT A company is deploying Azure Bastion to provide secure clientless access to its Azure VMs. The company configures a network security group named NSG1. During deployment, the following error

Question 92

(0)

HOTSPOT A company uses Azure Active Directory (Azure AD) for authentication. The company synchronizes Azure AD with an on-premises Active Directory domain. The company reports that an Azure AD obje

Question 93

(0)

HOTSPOT A company uses Azure Active Directory (Azure AD) with Azure role-based access control (RBAC) for access to resources. Some users report that they are unable to grant RBAC roles to other use

Question 94

(0)

HOTSPOT A company uses Azure Backup Agent to back up specific files and folders from an on-premises virtual machine (VM). An administrator reports that the backup job is transferring files slowly.

Question 95

(0)

HOTSPOT A company uses an Azure Backup agent to back up specific files and folder from an Azure virtual machine (VM) and an on-premises VM. An administrator reports that the backup job fails on bot

Question 96

(0)

HOTSPOT A company uses Azure Site Recovery for their on-premises Hyper-V servers. The company manages servers by using System Center Virtual Machine Manager (SCVMM). An administrator reports that r

Question 97

(0)

HOTSPOT A company has an Azure Active Directory (Azure AD) tenant. You are assigned the Owner role-based access control (RBAC) role of an Azure resource group named RG1. An administrator grants a u

Question 98

(0)

HOTSPOT A customer creates an Azure resource group named RG1 in the East US region. RG1 contains the following resources: The customer performs the following tasks: Create a private endpoint fo

Question 99

(0)

HOTSPOT A company has an Azure environment that uses one virtual network. The company restructures the environment to use two different virtual networks. Virtual machines in one network cannot com

Question 100

(0)

HOTSPOT A company uses an Azure VPN gateway with an IP address of 203.0.113.20. Users report that the VPN connection frequently drops. You need to determine when each connection failure occurred.

Related questions

HOTSPOT A company named Contoso connects its on-premises resources to Azure by using ExpressRoute. An administrator reports that the circuit is in a failed state. You need to resolve the issue. How should you complete the PowerShell commands?

A company has an Azure point-to-site virtual private network (VPN) that uses certificate-based authentication. A user reports that the following error message when they try to connect to the VPN by using a VPN client on a Windows 11 machine: A certificate could not be found You need to resolve the issue. Which three actions should you perform?

You need to resolve the issue with VM10. What should you do?

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-tosite connectivity on VNetGW1. An administrator configures VNetGW1 for the following: OpenVPN for the tunnel type. Azure certificate for the authentication type. Users receive a certificate mismatch error when connecting by using a VPN client. You need to resolve the certificate mismatch error. What should you do?

You need to resolve the issue repotted by Admin2. What should you do?

A company has two virtual networks (VNets) that are configured to use peering. Several Azure virtual machines are connected to each network. An on-premises network is connected to one of the VNets by using Azure VPN Gateway. An administrator reports that communication between applications across the VNets is failing. You need to troubleshoot the issue. Which two features can you use to achieve the goal?

A company has an Azure tenant. The company deploys an Azure Firewall named FW1 using the Standard SKU. You configure FW1 using classic firewall rules. The company creates an application rule collection with the following settings: Priority: 100 Action: Deny Rule type: FQDN Source type: IP address Source: * Protocol: http:80,https:443 Target FQDN: *.cloud.contoso.com An engineer observes that traffic to console.cloud.conotoso.com is still allowed by FW1. You need to determine why the traffic is allowed. What should you review?

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal. The company reports that the Azure VM backup job is failing. You need to troubleshoot the issue. Solution: Configure the retention range for the current VM backup policy. Does the solution meet the goal?

HOTSPOT A company uses Azure Firewall. The firewall uses the following rules: The company requires the following: • Block outbound connections to Contoso.com on ports 80 and 443. You configure the NetRC2 firewall rule to block the connections. Users report that they can still access Contoso.com on port 80 • Allow outbound connections to Adatuin.com on ports 80 and 443. You configure the AppRC2 firewall rule to allow the connections. Users report that they can access the Adaturn com website by using the IP address but not by using the fully qualified domain name (FQDN). You need to troubleshoot the rules that are causing the issues. Which rules should you review? To answer, select the appropriate options in the answer area.

A company implements self-service password reset (SSPR). After a firewall upgrade at the company's datacenter, SSPR stops working. You need to resolve the issue. Which two URLs must be present on the firewalls to allow SSPR to connect?

Question 91

HOTSPOT

A company is deploying Azure Bastion to provide secure clientless access to its Azure VMs. The company configures a network security group named NSG1. During deployment, the following error displays: Network security group NSG1 does not have necessary rules for Azure Bastion Subnet AzureBastionSubnet. You need to fix the inbound rules for NSG1.

How should you complete the configuration?

Show Answer Comment (0)

Question 92

HOTSPOT

A company uses Azure Active Directory (Azure AD) for authentication. The company synchronizes Azure AD with an on-premises Active Directory domain. The company reports that an Azure AD object fails to sync.

You need to determine which objects are not syncing.

Which troubleshooting steps should you use to diagnose the failure?

Show Answer Comment (0)

Question 93

HOTSPOT

A company uses Azure Active Directory (Azure AD) with Azure role-based access control (RBAC) for access to resources. Some users report that they are unable to grant RBAC roles to other users.

You need to troubleshoot the issue.

How should you complete the Azure Monitor query?

Show Answer Comment (0)

Question 94

HOTSPOT

A company uses Azure Backup Agent to back up specific files and folders from an on-premises virtual machine (VM). An administrator reports that the backup job is transferring files slowly. You determine that the backup job is verifying changes in directories by scanning the entire volume. You need to determine the state of the backup job.

In which state will the backups occur?

Show Answer Comment (0)

Question 95

HOTSPOT

A company uses an Azure Backup agent to back up specific files and folder from an Azure virtual machine (VM) and an on-premises VM. An administrator reports that the backup job fails on both VMs. Errors are returned in Microsoft Azure Recovery Services (MARS). You need to troubleshoot the backup issues.

Which troubleshooting solution should you use?

Show Answer Comment (0)

Question 96

HOTSPOT

A company uses Azure Site Recovery for their on-premises Hyper-V servers. The company manages servers by using System Center Virtual Machine Manager (SCVMM). An administrator reports that replication to the secondary site has failed.

You need to inspect the SCVMM logs and configuration files.

Which PowerShell cmdlets should you use?

Show Answer Comment (0)

Question 97

HOTSPOT

A company has an Azure Active Directory (Azure AD) tenant. You are assigned the Owner role-based access control (RBAC) role of an Azure resource group named RG1. An administrator grants a user named User1 the Contributor RBAC role for RG1. User1 receives an authorization error when attempting to create a Cosmos DB account in RG1. The administrator verifies that they can create a Cosmos DB account in RG1.

You need to troubleshoot the issue.

What should you do?

Show Answer Comment (0)

Question 98

HOTSPOT

A customer creates an Azure resource group named RG1 in the East US region. RG1 contains the following resources:

The customer performs the following tasks:

Create a private endpoint for sqlsrv1 in subnet2 with the private IP address of 192.168.2.100.

Create a private DNS zone named privatelink.database.windows.net by using a single A record named sqlsvr1 and the IP address 192.168.2.100. Disable public access by using the public endpoint for sqlsvr1.

The customer reports that connections from VM1 to DB1 are failing. The solution must allow connections from VM1 to DB1 without making platform-level changes. You need to troubleshoot and resolve the issue.

What should you do?

Show Answer Comment (0)

Question 99

HOTSPOT

A company has an Azure environment that uses one virtual network.

The company restructures the environment to use two different virtual networks. Virtual machines in one network cannot communicate with virtual machines in the other virtual network. You need to re-establish a connection between virtual machines in the two networks.

How should you configure the networks?