Nov-2023 Latest ITCertMagic AZ-720 Exam Dumps with PDF and Exam Engine Free Updated Today!
Following are some new AZ-720 Real Exam Questions!
NEW QUESTION # 35
A company hosts a network virtual appliance (VNA) and Azure Route Server in different virtual networks
(VNets). Border Gateway Protocol (BGP) peering is enabled between the NVA loses internet connectivity
after it advertises the default route to the route server.
You need to resolve the problem with the NVA.
What should you do?
- A. Configure a unique autonomous system number (ASN) on the NVA.
- B. Configure a public IP address on the route server.
- C. Configure a user-defined route on the NVA subnet.
- D. Move the route server to the same VNet as the NVA.
Answer: A
NEW QUESTION # 36
A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.
Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2.
You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.
You discover that FlowLog1 is not reporting outbound flow traffic.
You need to resolve the issue with FlowLog1.
What should you do?
- A. Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.
- B. Create the storage account for FlowLog1 as a premium block blob.
- C. Enable FlowLog1 in a network security group associated with the subnet of VM1.
- D. Create the storage account for FlowLog1 as a premium page blob.
Answer: C
Explanation:
when FastPath is enabled on an ExpressRoute gateway, network traffic between your on-premises network and your virtual network bypasses the gateway and goes directly to virtual machines in the virtual network. Therefore, if you want to capture outbound flow traffic from VM1, you need to enable flow logging on an NSG associated with the subnet of VM1.
NEW QUESTION # 37
A company plans to use an Azure PaaS service by using Azure Private Link service. The azure Private Link service and an endpoint have been configured.
The company reports that the endpoint is unable to connect to the service.
You need to resolve the connectivity issue.
What should you do?
- A. Validate the VPN device.
- B. Disable the service network policies.
- C. Approve the connection state.
- D. Disable the endpoint network policies.
Answer: B
NEW QUESTION # 38
A company uses public Azure DNS zones.
The company reports DNS record creation and name resolution issues.
You need to troubleshoot the issues.
What are the causes of the issues?
Answer:
Explanation:
NEW QUESTION # 39
A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a
site-to-site VPN connection.
The company's on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure
Virtual Network gateway.
You need to troubleshoot the issue by reviewing the logs.
Which log should you analyze?
- A. P2SDiagnosticLog
- B. RouteDiagnosticLog
- C. GatewayDiagnosticLog
- D. IKEDiagnosticLog
Answer: D
NEW QUESTION # 40
You need to troubleshoot and resolve the reverse DNS lookup issues.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 41
You need to troubleshoot the issues with the SharePoint workload in VNet2.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 42
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site
connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
* OpenVPN for the tunnel type.
* Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.
- B. Install an IKEv2 VPN client on the user's computers.
- C. Reissue the client certificate with client authentication enabled.
- D. Create a profile manually, add the server FQDN and reissue the client certificate.
Answer: A
NEW QUESTION # 43
A company uses an Azure VPN gateway to connect to their on-premises environment.
The company's on-premises VPN gateway is used by several services. One service is experiencing connectivity issues.
You need to minimize downtime for all services and resolve the connectivity issue.
Which three actions should you perform?
- A. Configure the hashing algorithm to be the same on both gateways.
- B. Configure the pre-shared key to be different on the Azure VPN gateway and the on-premises VPN gateways.
- C. Configure the hashing algorithm to be different on both gateways.
- D. Configure the pre-shared key to be the same on the Azure VPN gateway and the on-premises VPN gateways.
- E. Rest the VPN gateway.
- F. Rest the VPN connection.
Answer: A,B,D
NEW QUESTION # 44
You need to troubleshoot and resolve the public DNS lookup issues.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 45
A company hosts a network virtual appliance (VNA) and Azure Route Server in different virtual networks (VNets). Border Gateway Protocol (BGP) peering is enabled between the NVA loses internet connectivity after it advertises the default route to the route server.
You need to resolve the problem with the NVA.
What should you do?
- A. Configure a unique autonomous system number (ASN) on the NVA.
- B. Configure a public IP address on the route server.
- C. Configure a user-defined route on the NVA subnet.
- D. Move the route server to the same VNet as the NVA.
Answer: A
Explanation:
According to 2, when using Azure Route Server with network virtual appliances (NVAs), you need to ensure that each NVA has a unique ASN that is different from the route server's ASN and any other BGP peer's ASN. Otherwise, there will be routing issues due to BGP loop prevention mechanisms.
You can configure the ASN on the NVA by using its own configuration tools or commands. For more information, see 2.
NEW QUESTION # 46
You need to troubleshoot the issue reported by Blue Yonder Airlines.
Which diagnostic log should you review?
- A. RouteDiagnosticLog
- B. TunnelDiagnosticLog
- C. GatewayDiagnosticLog
- D. IKEDiagnosticLog
Answer: D
Explanation:
To troubleshoot the issue reported by Blue Yonder Airlines, you need to review the IKEDiagnosticLog, which contains information about the Internet Key Exchange (IKE) protocol that is used to establish IPsec VPN connections. The IKEDiagnosticLog can help you identify the cause of the VPN disconnections and IPsec failure to connect errors, such as mismatched authentication parameters, incorrect pre-shared keys, or network connectivity issues. You can enable and download the IKEDiagnosticLog from the Azure portal or by using PowerShell commands
NEW QUESTION # 47
A company has an Azure environment that uses one virtual network.
The company restructures the environment to use two different virtual networks. Virtual machines in one network cannot communicate with virtual machines in the other virtual network.
You need to re-establish a connection between virtual machines in the two networks.
How should you configure the networks?
Answer:
Explanation:
NEW QUESTION # 48
You need to resolve the connectivity issues for VM1 to Contoso Suites.
What parameters should you configure for each peering connection? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 49
You need to troubleshoot the issues related to VM3.
How should you complete the web link? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 50
A company deploys a new application and places the application behind an Azure Application Gateway Web Application Firewall (WAF).
A user with client IP 203.0.113.26 reports that they cannot access the application.
You need to troubleshoot the issue.
How should you complete the query?
Answer:
Explanation:
NEW QUESTION # 51
A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to
synchronize objects from their Active Directory Domain Services (AD DS) domain.
You observe that AD DS objects are not synchronizing to Azure AD.
You need to verify that the staging mode is enabled.
What should you do?
- A. Run this PowerShell cmdlet: Get-ADSyncScheduler
- B. Review the triggers for the Azure AD Connect sync scheduled task.
- C. Run this PowerShell cmdlet: Get-ADSyncConnetorRunStatus
- D. Review the history for the Azure AD Connect sync scheduled task.
Answer: A
NEW QUESTION # 52
A company uses an Azure VPN gateway with an IP address of 203.0.113.20.
Users report that the VPN connection frequently drops.
You need to determine when each connection failure occurred.
How should you complete the Azure Monitor query?
Answer:
Explanation:
NEW QUESTION # 53
A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a virtual network named contoso-vn in a resource group named contoso-rg.
An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address from a subnet named default.
You need to resolve the issue.
How should you complete the command?
Answer:
Explanation:
NEW QUESTION # 54
You need to troubleshoot and resolve the public DNS lookup issues.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 55
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?
- A. Install a Secure Socket Tunneling Protocol (SSTP) VPN client on the user's computers.
- B. Configure preshared key for authentication on the VPN profile.
- C. Create a profile manually, add the server FQDN and reissue the client certificate.
- D. Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.
Answer: C
NEW QUESTION # 56
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Enable replication and create a recovery plan for the backup vault.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
Explanation:
The solution does not meet the goal. Enabling replication and creating a recovery plan for the backup vault is not relevant to troubleshooting an Azure VM backup job failure. The administrator should troubleshoot the issue by checking the VM's disk configuration, checking the status of the VM guest agent, and ensuring that the backup policy is configured correctly.
NEW QUESTION # 57
You need to resolve the connectivity issue with the on-premises database named CosmosDB1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 58
A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a
virtual network named contoso-vn in a resource group named contoso-rg.
An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address
from a subnet named default.
You need to resolve the issue.
How should you complete the command?
Answer:
Explanation:
NEW QUESTION # 59
A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize objects from their Active Directory Domain Services (AD DS) domain.
You observe that AD DS objects are not synchronizing to Azure AD.
You need to verify that the staging mode is enabled.
What should you do?
- A. Run this PowerShell cmdlet: Get-ADSyncScheduler
- B. Review the triggers for the Azure AD Connect sync scheduled task.
- C. Run this PowerShell cmdlet: Get-ADSyncConnetorRunStatus
- D. Review the history for the Azure AD Connect sync scheduled task.
Answer: A
NEW QUESTION # 60
......
Resources From:
- 2023 Latest ITCertMagic AZ-720 Exam Dumps (PDF & Exam Engine) Free Share: https://passitsure.itcertmagic.com/Microsoft/real-AZ-720-exam-prep-dumps.html
Free Resources from ITCertMagic, We Devoted to Helping You 100% Pass All Exams!