Home / Microsoft / AZ-720

Microsoft AZ-720 Practice Test - Questions Answers, Page 9

Question list

List of questions

Question 81

(0)

HOTSPOT A company uses public Azure DNS zones. The company reports DNS record creation and name resolution issues. You need to troubleshoot the issues. What are the causes of the issues?

Question 82

(0)

HOTSPOT A company creates an Azure resource group named RG1. RG1 has an Azure SQL Database logical server named sqlsvr1 that hosts the following resources: An administrator grants a user named U

Question 83

(0)

HOTSPOT A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a virtual network named contoso-vn in a resource group named contoso-rg. An engineer modifi

Question 84

(0)

HOTSPOT A company develops an Azure Cosmos DB solution. The solution has the following components: A virtual network named VNet1 in a resource group named RG1. A subnet named Subnet1 in VNet1.

Question 85

(0)

HOTSPOT A company implements Azure Firewall and deploys an Azure Firewall policy. The policy incudes multiple application and network rules for the company's infrastructure. After deployment, an a

Question 86

(0)

HOTSPOT A company uses an Azure blob container. The IT department has a service-level agreement (SLA) that requests on average cannot exceed 20 milliseconds. You need to implement a log analytics

Question 87

(0)

HOTSPOT A company deploys a new application and places the application behind an Azure Application Gateway Web Application Firewall (WAF). A user with client IP 203.0.113.26 reports that they canno

Question 88

(0)

HOTSPOT A company implements Windows and Linux VMs in an Azure Virtual Network. The company plans to apply routing changes to the virtual network. You need to determine the impact of these changes

Question 89

(0)

HOTSPOT A company deploys Azure Traffic Manager load balancing for an Azure App Service solution. Load balancing performance is showing a degraded status after deployment, and new HTTPS probesare

Question 90

(0)

HOTSPOT A company attempts to implement just-in-time (JIT) access for a virtual machine (VM) named VM1. The company reports that they are unable to complete the process. You need to implement JIT

Related questions

HOTSPOT A company named Contoso connects its on-premises resources to Azure by using ExpressRoute. An administrator reports that the circuit is in a failed state. You need to resolve the issue. How should you complete the PowerShell commands?

A company has an Azure point-to-site virtual private network (VPN) that uses certificate-based authentication. A user reports that the following error message when they try to connect to the VPN by using a VPN client on a Windows 11 machine: A certificate could not be found You need to resolve the issue. Which three actions should you perform?

You need to resolve the issue with VM10. What should you do?

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-tosite connectivity on VNetGW1. An administrator configures VNetGW1 for the following: OpenVPN for the tunnel type. Azure certificate for the authentication type. Users receive a certificate mismatch error when connecting by using a VPN client. You need to resolve the certificate mismatch error. What should you do?

You need to resolve the issue repotted by Admin2. What should you do?

A company has two virtual networks (VNets) that are configured to use peering. Several Azure virtual machines are connected to each network. An on-premises network is connected to one of the VNets by using Azure VPN Gateway. An administrator reports that communication between applications across the VNets is failing. You need to troubleshoot the issue. Which two features can you use to achieve the goal?

A company has an Azure tenant. The company deploys an Azure Firewall named FW1 using the Standard SKU. You configure FW1 using classic firewall rules. The company creates an application rule collection with the following settings: Priority: 100 Action: Deny Rule type: FQDN Source type: IP address Source: * Protocol: http:80,https:443 Target FQDN: *.cloud.contoso.com An engineer observes that traffic to console.cloud.conotoso.com is still allowed by FW1. You need to determine why the traffic is allowed. What should you review?

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal. The company reports that the Azure VM backup job is failing. You need to troubleshoot the issue. Solution: Configure the retention range for the current VM backup policy. Does the solution meet the goal?

HOTSPOT A company uses Azure Firewall. The firewall uses the following rules: The company requires the following: • Block outbound connections to Contoso.com on ports 80 and 443. You configure the NetRC2 firewall rule to block the connections. Users report that they can still access Contoso.com on port 80 • Allow outbound connections to Adatuin.com on ports 80 and 443. You configure the AppRC2 firewall rule to allow the connections. Users report that they can access the Adaturn com website by using the IP address but not by using the fully qualified domain name (FQDN). You need to troubleshoot the rules that are causing the issues. Which rules should you review? To answer, select the appropriate options in the answer area.

A company implements self-service password reset (SSPR). After a firewall upgrade at the company's datacenter, SSPR stops working. You need to resolve the issue. Which two URLs must be present on the firewalls to allow SSPR to connect?

Question 81

HOTSPOT

A company uses public Azure DNS zones.

The company reports DNS record creation and name resolution issues.

You need to troubleshoot the issues.

What are the causes of the issues?

Show Answer Comment (0)

Question 82

HOTSPOT

A company creates an Azure resource group named RG1. RG1 has an Azure SQL Database logical server named sqlsvr1 that hosts the following resources:

An administrator grants a user named User1 the Reader RBAC role in RG1. The administrator grants User2 the Contributor role in sqlsvr1. User1 reports that they can connect to SQLDB1 from the IP address 155.127.95.212. User1 cannot connect to SQLDB2. User2 can connect to both SQLDB1 and SQLDB2 from the IP address 121.19.27.18. Both users can successfully connect to SQLDB1 and SQLDB2 from VM1.

You are helping the administrator troubleshoot the issue. You run the following PowerShell command:

Get-AzSqlServerFirewallRule -ResourceGroupName 'RG1' -ServerName 'sqlsvr1' The following output displays:

You need to identify the cause for the reported issue and resolve User1's issues. The solution must satisfy the principle of least privilege. What should you do?

Show Answer Comment (0)

Question 83

HOTSPOT

A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a virtual network named contoso-vn in a resource group named contoso-rg. An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address from a subnet named default.

You need to resolve the issue.

How should you complete the command?

Show Answer Comment (0)

Question 84

HOTSPOT

A company develops an Azure Cosmos DB solution.

The solution has the following components:

A virtual network named VNet1 in a resource group named RG1.

A subnet named Subnet1 in VNet1.

A Private Link service.

The company is unable to configure a source IP address for the Private Link service from Subnet1.

You need to resolve the issue for Subnet1.

How should you complete the PowerShell commands?

Show Answer Comment (0)

Question 85

HOTSPOT

A company implements Azure Firewall and deploys an Azure Firewall policy.

The policy incudes multiple application and network rules for the company's infrastructure. After deployment, an application is not accessible from on-premises computers. You need to enable diagnostic logging for the following settings:

AzureFirewallApplicationRule

AzureFirewallNetworkRule

AzureFirewallDnsProxy

How should you complete the PowerShell cmdlet?

Show Answer Comment (0)

Question 86

HOTSPOT

A company uses an Azure blob container.

The IT department has a service-level agreement (SLA) that requests on average cannot exceed 20 milliseconds. You need to implement a log analytics query to generate the SLA report.

How should you complete the query?

Show Answer Comment (0)

Question 87

HOTSPOT

A company deploys a new application and places the application behind an Azure Application Gateway Web Application Firewall (WAF). A user with client IP 203.0.113.26 reports that they cannot access the application.

You need to troubleshoot the issue.

How should you complete the query?

Show Answer Comment (0)

Question 88

HOTSPOT

A company implements Windows and Linux VMs in an Azure Virtual Network. The company plans to apply routing changes to the virtual network. You need to determine the impact of these changes on network latency affecting applications that use TCP and UDP traffic. The solution must provide the highest level of accuracy. Which tools should you use?

Show Answer Comment (0)

Question 89

HOTSPOT

A company deploys Azure Traffic Manager load balancing for an Azure App Service solution.

Load balancing performance is showing a degraded status after deployment, and new HTTPS probesare failing to reach the Traffic Manager endpoints. You need to troubleshoot the probe failure.

How should you complete the PowerShell script?