Share Latest Jul-2023 AZ-720 DUMP with 104 Questions and Answers
PDF Dumps 2023 Exam Questions with Practice Test
The Microsoft AZ-720 exam covers a range of topics related to Azure connectivity, including troubleshooting connectivity issues between on-premises and Azure resources, resolving issues with Azure virtual networks, and identifying and resolving issues with Azure ExpressRoute. The exam also tests knowledge of Azure traffic management solutions, including Azure Traffic Manager and Azure Front Door, and covers troubleshooting issues related to Azure DNS and load balancers.
NEW QUESTION # 54
A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network.
You need to implement a solution.
Solution: Configure a route table with route propagation disabled.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION # 55
A company uses Azure virtual machines (VMs) in multiple regions. The VMs have the following
configuration:
The backend pool of an internal Azure Load Balancer (ILB) named ILB1 contains VM1 and VM2. The ILB
uses the Basic SKU and is in a resource group RG2.
Virtual network peering has been configured between VNet1 and VNet2.
Users report that they are unable to connect to resources on VM1 and VM2 by using ILB1 from VM3.
You need to resolve the connectivity issues.
What should you do?
- A. Move VM1 and VM2 into RG3.
- B. Move ILB1 to RG1.
- C. Redeploy VM1 and VM2 into availability zones.
- D. Redeploy the ILB using the Standard SKU.
Answer: C
NEW QUESTION # 56
You need to resolve the Azure virtual machine (VM) deployment issues.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 57
A company creates an Azure resource group named RG1. RG1 has an Azure SQL Database logical server named sqlsvr1 that hosts the following resources:
An administrator grants a user named User1 the Reader RBAC role in RG1. The administrator grants User2 the Contributor role in sqlsvr1.
User1 reports that they can connect to SQLDB1 from the IP address 155.127.95.212. User1 cannot connect to SQLDB2. User2 can connect to both SQLDB1 and SQLDB2 from the IP address 121.19.27.18. Both users can successfully connect to SQLDB1 and SQLDB2 from VM1.
You are helping the administrator troubleshoot the issue. You run the following PowerShell command:
Get-AzSqlServerFirewallRule -ResourceGroupName 'RG1' -ServerName 'sqlsvr1' The following output displays:
You need to identify the cause for the reported issue and resolve User1's issues. The solution must satisfy the principle of least privilege.
What should you do?
Answer:
Explanation:
NEW QUESTION # 58
A company uses Azure Backup Agent to back up specific files and folders from an on-premises virtual
machine (VM).
An administrator reports that the backup job is transferring files slowly. You determine that the backup job is
verifying changes in directories by scanning the entire volume.
You need to determine the state of the backup job.
In which state will the backups occur?
Answer:
Explanation:
NEW QUESTION # 59
A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure.
The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are expected to sustain 300 Mbps.
You need to ensure that the VMs are compatible with Azure.
Which change should you make?
- A. Redeploy the VM with Accelerated Networking enabled.
- B. Configure the network interfaces to 1000 Mbps/full duplex.
- C. Increase the TCP buffers and window size kernel parameters.
- D. Install a kernel name that ends with -azure.
Answer: A
Explanation:
To ensure that Ubuntu Linux servers are compatible with Azure and to increase network throughput from 20 Mbps to 300 Mbps, you should redeploy the VM with Accelerated Networking enabled. Therefore, option C is correct. You should redeploy the VM with Accelerated Networking enabled.
NEW QUESTION # 60
You manage an Azure point-to-site (P2S) VPN deployment. All users connect regularly from their personal Windows computer through a P2S VPN by using certificate-based authentication.
A new user attempts to establish a P25S VPN connection. The user receives the following error message:
A certificate could not be found that can be used with this Extensible Authentication protocol. (Error 798) You need to assists the user with resolving the certificate issue.
What should you do? To answer, drag the appropriate locations to the correct task. Each location maybe used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 61
A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize users from an Active Directory Domain Services (AD DS).
The synchronization of a user object is failing.
You need to troubleshoot the failing synchronization by using a built-in Azure AD Connect troubleshooting task.
Which two pieces of information should you collect before you start troubleshooting?
- A. Object globally unique identifier
- B. AD connector name
- C. Object common name
- D. Azure AD connector name
- E. Object distinguished name
Answer: B,E
Explanation:
the two pieces of information that should be collected before starting to troubleshoot the failing synchronization by using a built-in Azure AD Connect troubleshooting task are: B. AD connector name E. Object distinguished name Azure AD Connect is a tool used to synchronize users from an on-premises Active Directory Domain Services (AD DS) to Azure AD. When troubleshooting synchronization issues, it is important to have information about the object that is failing to synchronize. The AD connector name refers to the name of the connector used to connect to the on-premises AD DS. The object distinguished name refers to the unique identifier of the object in the on-premises AD DS. Having this information can help identify and resolve synchronization issues.
NEW QUESTION # 62
A company hosts a network virtual appliance (VNA) and Azure Route Server in different virtual networks
(VNets). Border Gateway Protocol (BGP) peering is enabled between the NVA loses internet connectivity
after it advertises the default route to the route server.
You need to resolve the problem with the NVA.
What should you do?
- A. Configure a user-defined route on the NVA subnet.
- B. Configure a public IP address on the route server.
- C. Configure a unique autonomous system number (ASN) on the NVA.
- D. Move the route server to the same VNet as the NVA.
Answer: C
NEW QUESTION # 63
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Create a profile manually, add the server FQDN and reissue the client certificate.
- B. Reissue the client certificate with server authentication enabled.
- C. Reissue the client certificate with client authentication enabled.
- D. Install an IKEv2 VPN client on the user's computers.
Answer: A
NEW QUESTION # 64
You need to troubleshoot the CosmosDB1 issues from the on-premises environment. What should you use?
- A. Network Watcher Connection troubleshoot diagnostic tool
- B. Network Watcher next hop diagnostic tool
- C. route command
- D. nslookup command
Answer: A
Explanation:
This tool helps you troubleshoot network connectivity issues from a virtual machine to a given endpoint. It tests for reachability from the virtual machine to the endpoint and provides information about why a connection fails1. In this case, you can use this tool to troubleshoot the connectivity issues from the on-premises environment to CosmosDB1.
NEW QUESTION # 65
A company has virtual machines (VMs) in the following Azure regions:
* West Central US
* Australia East
The company uses ExpressRoute private peering to provide connectivity to VMs hosted on each region and
on-premises services.
The company implements global VNet peering between a VNet in each region. After configuring VNet
peering, VM traffic attempts to use ExpressRoute private peering.
You need to ensure that traffic uses global VNet peering instead of ExpressRoute private peering. The solution
must preserve existing on-premises connectivity to Azure VNets.
What should you do?
- A. Add a filter to the on-premises routers.
- B. Add a user-defined route to the subnets route table.
- C. Add a second VNet to the virtual machines and configure VNet peering between the VNets.
- D. Disable the ExpressRoute peering connections for one of the regions.
Answer: A
NEW QUESTION # 66
A company has an Azure Active Directory (Azure AD) tenant. You are assigned the Owner role-based access
control (RBAC) role of an Azure resource group named RG1.
An administrator grants a user named User1 the Contributor RBAC role for RG1. User1 receives an
authorization error when attempting to create a Cosmos DB account in RG1.
The administrator verifies that they can create a Cosmos DB account in RG1.
You need to troubleshoot the issue.
What should you do?
Answer:
Explanation:
NEW QUESTION # 67
A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active
Directory Domain Services (Azure AD DS) instance.
Users report that they are unable to sign into Azure AD DS after being provisioned from Azure AD. You
verify the user accounts exist in Azure AD DS.
You need to resolve the issue.
What should you do?
- A. Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS
again. - B. Deploy Azure AD Connect.
- C. Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable
Azure AD DS again. - D. Instruct the users to change their password in Azure AD.
Answer: D
NEW QUESTION # 68
You need to troubleshoot and resolve the reverse DNS lookup issues.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 69
You need to troubleshoot and resolve the reverse VPN connectivity issues.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 70
......
Dumps for Free AZ-720 Practice Exam Questions: https://certification-questions.pdfvce.com/Microsoft/AZ-720-exam-pdf-dumps.html