Home / Microsoft / AZ-720

Microsoft AZ-720 Practice Test - Questions Answers, Page 6

Question list

List of questions

Question 51

(0)

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associa

Question 52

(0)

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associa

Question 53

(0)

A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active Directory Domain Services (Azure AD DS) instance. Users report that they are unable to sign into Azu

Question 54

(0)

A company has users in Azure Active Directory (Azure AD). The company enables the users to use Azure AD multi-factor authentication (MFA). A user named User1 reports they receive the following error

Question 55

(0)

A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize objects from their Active Directory Domain Services (AD DS) domain. You observe that AD

Question 56

(0)

A company has on-premises application server that runs in System Center Virtual Machine Manager (SCVMM). The company configures Azure Site Recovery. An administrator at the company reports that the

Question 57

(0)

A company uses Azure Site Recovery (ASR) for a VMware environment that includes the following virtual machines (VMs): The company reports that they are unable to configure all of the servers for

Question 58

(0)

A company uses Azure Site Recovery (ASR) to replicate and recover Azure virtual machines (VM) between Azure regions. An administrator receives the following warning from ASR about a VM that uses P10

Question 59

(0)

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal. The company reports that the Azure VM backup job is fa

Question 60

(0)

A company enables just-in-time (JIT) virtual machine (VM) access in Azure. An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Clo

Related questions

HOTSPOT A company named Contoso connects its on-premises resources to Azure by using ExpressRoute. An administrator reports that the circuit is in a failed state. You need to resolve the issue. How should you complete the PowerShell commands?

A company has an Azure point-to-site virtual private network (VPN) that uses certificate-based authentication. A user reports that the following error message when they try to connect to the VPN by using a VPN client on a Windows 11 machine: A certificate could not be found You need to resolve the issue. Which three actions should you perform?

You need to resolve the issue with VM10. What should you do?

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-tosite connectivity on VNetGW1. An administrator configures VNetGW1 for the following: OpenVPN for the tunnel type. Azure certificate for the authentication type. Users receive a certificate mismatch error when connecting by using a VPN client. You need to resolve the certificate mismatch error. What should you do?

You need to resolve the issue repotted by Admin2. What should you do?

A company has two virtual networks (VNets) that are configured to use peering. Several Azure virtual machines are connected to each network. An on-premises network is connected to one of the VNets by using Azure VPN Gateway. An administrator reports that communication between applications across the VNets is failing. You need to troubleshoot the issue. Which two features can you use to achieve the goal?

A company has an Azure tenant. The company deploys an Azure Firewall named FW1 using the Standard SKU. You configure FW1 using classic firewall rules. The company creates an application rule collection with the following settings: Priority: 100 Action: Deny Rule type: FQDN Source type: IP address Source: * Protocol: http:80,https:443 Target FQDN: *.cloud.contoso.com An engineer observes that traffic to console.cloud.conotoso.com is still allowed by FW1. You need to determine why the traffic is allowed. What should you review?

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal. The company reports that the Azure VM backup job is failing. You need to troubleshoot the issue. Solution: Configure the retention range for the current VM backup policy. Does the solution meet the goal?

A company implements self-service password reset (SSPR). After a firewall upgrade at the company's datacenter, SSPR stops working. You need to resolve the issue. Which two URLs must be present on the firewalls to allow SSPR to connect?

A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP). A new subnet should be unreachable from the on-premises network. You need to implement a solution. Solution: Configure subnet delegation. Does the solution meet the goal?

Question 51

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.

Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2. You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.

You discover that FlowLog1 is not reporting outbound flow traffic.

You need to resolve the issue with FlowLog1.

What should you do?

Enable FlowLog1 in a network security group associated with the subnet of VM1.

Configure the FlowTimeoutInMinutes property on VNet2 to a non-null value.

Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.

Configure FlowLog1 for version 2.

Show Answer Comment (0)

Question 52

You discover that FlowLog1 is not reporting outbound flow traffic.

You need to resolve the issue with FlowLog1.

What should you do?

Create the storage account for FlowLog1 as a premium block blob.

Create the storage account for FlowLog1 as a premium page blob.

Enable FlowLog1 in a network security group associated with the subnet of VM1.

Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.

Show Answer Comment (0)

Question 53

A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active Directory Domain Services (Azure AD DS) instance. Users report that they are unable to sign into Azure AD DS after being provisioned from Azure AD.

You verify the user accounts exist in Azure AD DS.

You need to resolve the issue.

What should you do?

Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable Azure AD DS again.

Deploy Azure AD Connect.

Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS again.

Instruct the users to change their password in Azure AD.

Show Answer Comment (0)

Question 54

A company has users in Azure Active Directory (Azure AD). The company enables the users to use Azure AD multi-factor authentication (MFA). A user named User1 reports they receive the following error while setting up additional security verification settings for MFA:

Sorry! We can't process your request. Your session is invalid or expired. There was an error processing your request because your session is invalid or expired. Please try again. You need to help the user complete the MFA setup.

What should you do?

From the Microsoft 365 Admin portal, clear the Block this user from signing in option for the user.

Instruct the user to complete the setup process within 10 minutes.

Instruct the user to enter the correct verification code.

Instruct the user to clear their web browser cache.

From the Azure AD portal, reset the user's password.

Show Answer Comment (0)

Question 55

A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize objects from their Active Directory Domain Services (AD DS) domain. You observe that AD DS objects are not synchronizing to Azure AD.

You need to verify that the staging mode is enabled.

What should you do?

Review the history for the Azure AD Connect sync scheduled task.

Run this PowerShell cmdlet: Get-ADSyncScheduler

Review the triggers for the Azure AD Connect sync scheduled task.

Run this PowerShell cmdlet: Get-ADSyncConnetorRunStatus

Show Answer Comment (0)

Question 56

A company has on-premises application server that runs in System Center Virtual Machine Manager (SCVMM). The company configures Azure Site Recovery.

An administrator at the company reports that they receive an error message. The error message indicates that there are replication issues. You need to troubleshoot the issue.

Which log should you review?

Network Security Group flow log

Azure Monitor log

Network Watcher diagnostic log

SCVMM debug log

Show Answer Comment (0)

Question 57

A company uses Azure Site Recovery (ASR) for a VMware environment that includes the following virtual machines (VMs):

The company reports that they are unable to configure all of the servers for replication.

You need to evaluate the servers and server roles to determine which servers can be protected.

Which server can you protect by using ASR?

VM1

VM2

VM3

VM4

Show Answer Comment (0)

Question 58

A company uses Azure Site Recovery (ASR) to replicate and recover Azure virtual machines (VM) between Azure regions. An administrator receives the following warning from ASR about a VM that uses P10 disks: Data change rate beyond supported limits You add OS Disk Write Bytes/Sec and Data Disk Write Bytes/Sec to the list of metrics for monitoring. You discover that the VM consistently has a data churn of greater than 8 MB/s but less than 10 MB/s.

You need to resolve the issue.

What should you do?

Uninstall the Volume Shadow Copy Service (VSS) Provider service.

Use AzCopy to upload data to a cache storage account.

Create a network service endpoint in a virtual network.

Upgrade the target storage disk.

Show Answer Comment (0)

Question 59

You need to troubleshoot the issue.

What should you do?

Create a new manual backup in Backup center.

Run chkdsk on the VM.

Configure the retention range of the current backup policy for the VM.

Install the VM guest agent with administrative permissions.

Enable replication and create a recovery plan for the backup vault.

Show Answer Comment (0)

Question 60

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.

An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal. You need to determine why some VMs are not supported for JIT VM access.

What should you conclude?

The administrator is using the Microsoft Defender for Cloud free tier.

The VMs were provisioned by using a classic deployment.

The VMs were recently provisioned by using an Azure Resource Manager deployment.

The administrator does not have the SecurityReader role.

Show Answer Comment (0)

Total 119 questions