Act now and download your Microsoft AZ-720 test today! Do not waste time for the worthless Microsoft AZ-720 tutorials. Download Up to the immediate present Microsoft Troubleshooting Microsoft Azure Connectivity exam with real questions and answers and begin to learn Microsoft AZ-720 with a classic professional.
Online Microsoft AZ-720 free dumps demo Below:
NEW QUESTION 1
A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.
Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2.
You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet. You discover that FlowLog1 is not reporting outbound flow traffic.
You need to resolve the issue with FlowLog1. What should you do?
- A. Enable FlowLog1 in a network security group associated with the subnet of VM1.
- B. Configure the FlowTimeoutInMinutes property on VNet2 to a non-null value.
- C. Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.
- D. Configure FlowLog1 for version 2.
Answer: B
NEW QUESTION 2
A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a virtual network named contoso-vn in a resource group named contoso-rg.
An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address from a subnet named default.
You need to resolve the issue.
How should you complete the command?
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 3
A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network. You need to implement a solution.
Solution: Disable peering on the virtual network. Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 4
A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network. You need to implement a solution.
Solution: Configure a route table with route propagation disabled. Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 5
A company has an Azure tenant. The company deploys an Azure firewall named FW1 to control access from an on-premises datacenter to an Azure virtual machine named VM1.
The company troubleshoots ICMP connectivity from the on-premises datacenter to VM1. You are unable to ping VM1 from an on-premises server.
You need to determine if ICMP connectivity to VM1 is allow on FW1. What should you do?
- A. Use the ping command targeting the IP address of VM1 and review the Infrastructure rules log of FW1.
- B. Use the ping command targeting the IP address of VM1 and review the command's response.
- C. Use the ping command targeting the IP address of VM1 and review the Network rules log of FW1.
- D. Use the ping command targeting the fully qualified domain name of VM1 and review the command's response.
Answer: B
NEW QUESTION 6
A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time. You need to troubleshoot the cause for the disconnections.
What should you verify?
- A. The partner's VPN device and VNetGW1 are configured using the same shared key.
- B. VNetGW1 has exceeded the subnet Security Association pairs.
- C. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
- D. The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.
Answer: A
NEW QUESTION 7
A company is deploying Azure Bastion to provide secure clientless access to its Azure VMs. The company configures a network security group named NSG1.
During deployment, the following error displays: Network security group NSG1 does not have necessary rules for Azure Bastion Subnet AzureBastionSubnet.
You need to fix the inbound rules for NSG1. How should you complete the configuration?
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 8
A company plans to implement ExpressRoute by using the provider connectivity model.
The company creates an ExpressRoute circuit. You are unable to connect to resources through the circuit. You need to determine the provisioning state of the service provider.
Which PowerShell cmdlet should you run?
- A. Get-AzExpressRouteCircuitPeeringConfig
- B. Get-AzExpressRouteCircuitRouteTable
- C. Get-AzExpressRouteCircuitConnectionConfig
- D. Get-AzExpressRouteCircuit
- E. Get-AzExpressRouteCircuitARPTable
Answer: C
NEW QUESTION 9
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing. You need to troubleshoot the issue.
Solution: Install the VM guest agent by using administrative permissions. Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 10
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR). An administrator receives an error that password writeback could not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue. What should you do?
- A. Restart the Azure AD Connect service.
- B. Configure Azure AD Connect using a global administrator account that is not federated.
- C. Configure Azure AD Connect using a global administrator account with a password that is less than 256 characters.
- D. Disable password writeback and then enable password writeback using the Azure AD Connect configuration.
Answer: C
NEW QUESTION 11
A company deploys Azure Bastion to connect to their virtual machine (VM) infrastructure.
An engineer attempts to connect to a Windows VM by using Remote Desktop Protocol (RDP). The connection fails.
You need to troubleshoot the issue. Which two actions should you perform?
- A. Monitor traffic with the following PowerShell cmdlet Test-AzNetworkWatcherConnectivity.
- B. Configure Azure Bastion with static assignment.
- C. Apply a network security group on the same subnet as Azure Bastion.
- D. Run the Network Watcher Connection troubleshoot service.
- E. Monitor traffic with the following PowerShell cmdlet New-AzNetworkWatcherFlowLog.
Answer: BE
NEW QUESTION 12
A company uses public Azure DNS zones.
The company reports DNS record creation and name resolution issues. You need to troubleshoot the issues.
What are the causes of the issues?
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 13
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client. You need to resolve the certificate mismatch error.
What should you do?
- A. Install an IKEv2 VPN client on the user's computers.
- B. Reissue the client certificate with client authentication enabled.
- C. Create a profile manually, add the server FQDN and reissue the client certificate.
- D. Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.
Answer: D
NEW QUESTION 14
A company deploys an Azure Firewall. The company reports the following log entry:
For each of the following questions, select Yes or No.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 15
A company manages a solution that uses Azure Functions.
A function returns the following error: Azure Function Runtime is unreachable.
You need to troubleshoot the issue.
What are two possible causes of the issue?
- A. The execution quota is full.
- B. The company did not configure a timer trigger.
- C. The storage account application settings were deleted.
- D. The function key was deleted.
- E. The storage account for the function was deleted.
Answer: BC
NEW QUESTION 16
A company develops an Azure Cosmos DB solution. The solution has the following components:
A virtual network named VNet1 in a resource group named RG1. 
A subnet named Subnet1 in VNet1. A Private Link service.
The company is unable to configure a source IP address for the Private Link service from Subnet1. You need to resolve the issue for Subnet1.
How should you complete the PowerShell commands?
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 17
A company has on-premises application server that runs in System Center Virtual Machine Manager (SCVMM). The company configures Azure Site Recovery.
An administrator at the company reports that they receive an error message. The error message indicates that there are replication issues.
You need to troubleshoot the issue. Which log should you review?
- A. Network Security Group flow log
- B. Azure Monitor log
- C. Network Watcher diagnostic log
- D. SCVMM debug log
Answer: A
NEW QUESTION 18
......
Thanks for reading the newest AZ-720 exam dumps! We recommend you to try the PREMIUM Thedumpscentre.com AZ-720 dumps in VCE and PDF here: https://www.thedumpscentre.com/AZ-720-dumps/ (81 Q&As Dumps)