Home / Microsoft / AZ-720

Microsoft AZ-720 Practice Test - Questions Answers, Page 7

Question list

List of questions

Question 61

(0)

A company enables just-in-time (JIT) virtual machine (VM) access in Azure. An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Clo

Question 62

(0)

A company enables just-in-time (JIT) virtual machine (VM) access in Azure. An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Clo

Question 63

(0)

A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR). An administrator receives an error that password writeback could not be enabled during the Azure A

Question 64

(0)

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VP

Question 65

(0)

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VP

Question 66

(0)

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VP

Question 67

(0)

A company deploys ExpressRoute. The company reports that there is an autonomous system (AS) number mismatch. You need to identify the AS number of the circuit. Which PowerShell cmdlet should you

Question 68

(0)

A company has two virtual networks (VNets) that reside in the same Azure region. An administrator reports that virtual machines (VMs) in each VNet are unable to connect to VMs in the other VNet. Yo

Question 69

(0)

A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure. The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are

Question 70

(0)

A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection. The company's on-premises VPN gateway is reporting an issue with the P

Related questions

HOTSPOT A company named Contoso connects its on-premises resources to Azure by using ExpressRoute. An administrator reports that the circuit is in a failed state. You need to resolve the issue. How should you complete the PowerShell commands?

A company has an Azure point-to-site virtual private network (VPN) that uses certificate-based authentication. A user reports that the following error message when they try to connect to the VPN by using a VPN client on a Windows 11 machine: A certificate could not be found You need to resolve the issue. Which three actions should you perform?

You need to resolve the issue with VM10. What should you do?

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-tosite connectivity on VNetGW1. An administrator configures VNetGW1 for the following: OpenVPN for the tunnel type. Azure certificate for the authentication type. Users receive a certificate mismatch error when connecting by using a VPN client. You need to resolve the certificate mismatch error. What should you do?

You need to resolve the issue repotted by Admin2. What should you do?

A company has two virtual networks (VNets) that are configured to use peering. Several Azure virtual machines are connected to each network. An on-premises network is connected to one of the VNets by using Azure VPN Gateway. An administrator reports that communication between applications across the VNets is failing. You need to troubleshoot the issue. Which two features can you use to achieve the goal?

A company has an Azure tenant. The company deploys an Azure Firewall named FW1 using the Standard SKU. You configure FW1 using classic firewall rules. The company creates an application rule collection with the following settings: Priority: 100 Action: Deny Rule type: FQDN Source type: IP address Source: * Protocol: http:80,https:443 Target FQDN: *.cloud.contoso.com An engineer observes that traffic to console.cloud.conotoso.com is still allowed by FW1. You need to determine why the traffic is allowed. What should you review?

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal. The company reports that the Azure VM backup job is failing. You need to troubleshoot the issue. Solution: Configure the retention range for the current VM backup policy. Does the solution meet the goal?

A company implements self-service password reset (SSPR). After a firewall upgrade at the company's datacenter, SSPR stops working. You need to resolve the issue. Which two URLs must be present on the firewalls to allow SSPR to connect?

A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP). A new subnet should be unreachable from the on-premises network. You need to implement a solution. Solution: Configure subnet delegation. Does the solution meet the goal?

Question 61

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.

An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal. You need to determine why some VMs are not supported for JIT VM access.

What should you conclude?

The administrator is using the Microsoft Defender for Cloud free tier.

The VMs were provisioned by using a classic deployment.

The administrator does not have the SecurityReader role.

The administrator does not have permissions to request JIT access to the VMs.

Show Answer Comment (0)

Question 62

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.

What should you conclude?

The administrator does not have the SecurityReader role.

The administrator is using the Microsoft Defender for Cloud free tier.

The client firewall does not allow port 22 on the VMs.

A network security group is not associated with the VMs.

Show Answer Comment (0)

Question 63

A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR). An administrator receives an error that password writeback could not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:

Error getting auth token

You need to resolve the issue.

What should you do?

Restart the Azure AD Connect service.

Configure Azure AD Connect using a global administrator account that is not federated.

Configure Azure AD Connect using a global administrator account with a password that is less than 256 characters.

Disable password writeback and then enable password writeback using the Azure AD Connect configuration.

Show Answer Comment (0)

Question 64

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VPN disconnects from time to time.

You need to troubleshoot the cause for the disconnections.

What should you verify?

The partner's VPN device and VNetGW1 are configured using the same shared key.

The IP address of the local network gateway matches the partner's VPN device.

The partner's VPN device is enabled for Perfect forward secrecy.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

Show Answer Comment (0)

Question 65

You need to troubleshoot the cause for the disconnections.

What should you verify?

The partner's VPN device and VNetGW1 are configured using the same shared key.

VNetGW1 has exceeded the subnet Security Association pairs.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.

Show Answer Comment (0)

Question 66

You need to troubleshoot the cause for the disconnections.

What should you verify?

The partner's VPN device and VNetGW1 are configured using the same shared key.

The partner's VPN device is configured for one VPN tunnel per subnet pair.

The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.

The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

Show Answer Comment (0)

Question 67

A company deploys ExpressRoute.

The company reports that there is an autonomous system (AS) number mismatch.

You need to identify the AS number of the circuit.

Which PowerShell cmdlet should you run?

Get-AzExpressRouteCircuitPeeringConfig

Get-AzExpressRouteCircuitStats

Get-AzExpressRouteCircuitRouteTable

Get-AzExpressRouteCircuit

Show Answer Comment (0)

Question 68

A company has two virtual networks (VNets) that reside in the same Azure region.

An administrator reports that virtual machines (VMs) in each VNet are unable to connect to VMs in the other VNet. You need to configure a connection between the two networks that maximizes throughput and minimizes latency. What should you do?

Configure a VPN gateway.

Create a site-to-site VPN connection.

Configure virtual network peering.

Create a point-to-site VPN connection.

Show Answer Comment (0)

Question 69

A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure. The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are expected to sustain 300 Mbps. You need to ensure that the VMs are compatible with Azure.

Which change should you make?

Install a kernel name that ends with -azure.

Configure the network interfaces to 1000 Mbps/full duplex.

Redeploy the VM with Accelerated Networking enabled.

Increase the TCP buffers and window size kernel parameters.

Show Answer Comment (0)

Question 70

A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection. The company's on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure Virtual Network gateway. You need to troubleshoot the issue by reviewing the logs.

Which log should you analyze?

P2SDiagnosticLog

GatewayDiagnosticLog

IKEDiagnosticLog

RouteDiagnosticLog

Show Answer Comment (0)

Total 119 questions

5 6 7 8 9

Go to page: of 12