[Feb-2024] Use Real AZ-720 Dumps - 100% Free AZ-720 Exam Dumps
AZ-720 PDF Dumps Exam Questions – Valid AZ-720 Dumps
The AZ-720 exam focuses on various Azure networking concepts such as Azure Virtual Networks, Azure ExpressRoute, Azure VPN Gateway, Azure Firewall, Azure Load Balancer, and Azure Traffic Manager. AZ-720 exam also tests the candidate's expertise in troubleshooting network connectivity issues between virtual machines, virtual networks, and on-premises networks. Candidates are expected to demonstrate their proficiency in identifying and resolving connectivity issues using various troubleshooting tools and techniques. Successful completion of the AZ-720 exam validates the candidate's ability to troubleshoot Azure connectivity issues and confirms their expertise in Azure networking.
The AZ-720 certification exam is ideal for IT professionals who work in roles such as Cloud Administrator, Cloud Solutions Architect, Network Administrator, and Network Solutions Architect. AZ-720 exam can help professionals to identify and resolve issues faster, reducing downtime and improving the overall performance of Azure-based applications and services. AZ-720 exam is also an excellent way to demonstrate expertise in Azure troubleshooting to potential employers.
Microsoft AZ-720 certification exam is an excellent way for IT professionals to enhance their Azure troubleshooting skills and gain recognition for their expertise in this area. By passing AZ-720 exam, candidates can demonstrate their ability to diagnose and resolve complex connectivity issues in Azure services, which can be a valuable skill for organizations that rely heavily on Azure for their IT infrastructure. Troubleshooting Microsoft Azure Connectivity certification can also open up new career opportunities and help professionals advance in their careers as Azure administrators or network engineers.
NEW QUESTION # 42
A company has a pay-as-you-go subscription named Subl1.
The company has a virtual machine (VM) named VM1 in a subnet named Subnet1.
You create the following network security group (NSG) named NSG1 and associate it with Subnet1.
You observe that an application on VM1 is unable to send email to recipient outside the company You need to resolve the issue.
What should you do?
- A. Remove the NSG1 rule with a priority of 2000.
- B. Configure the source and destination ports for the NSG1 rule with a priority of 100 to 587.
- C. Migrate Sub1 to a cloud service provider subscription
- D. Configure the source and destination ports for the NSG1 rule with a priority of 100 to 587.
- E. Assign NSG1 to the network interface on VM1.
- F. Configure the protocol for the NSG1 rule with priority of 100 to TCP.
Answer: D
Explanation:
The NSG1 rule with priority 100 currently allows all outbound traffic (source: any, destination: any, protocol: any). To restrict the outbound traffic to only TCP port 587, modify the rule to use the following configuration:
Name: Allow_Outbound_Email
Priority: 100
Source: Any
Destination: Any
Protocol: TCP
Source Port Range: *
Destination Port Range: 587
Action: Allow
Once you have updated the NSG1 rule, the application on VM1 should be able to send email to recipients outside the company.
Explanation:
To resolve the issue where the application on VM1 is unable to send email to recipients outside the company, you should modify the NSG1 rule with a priority of 100 to allow outbound traffic on TCP port 587. The correct answer is therefore:
NEW QUESTION # 43
A company has users in Azure Active Directory (Azure AD). The company enables the users to use Azure AD multi-factor authentication (MFA).
A user named User1 reports they receive the following error while setting up additional security verification settings for MFA:
Sorry! We can't process your request. Your session is invalid or expired. There was an error processing your request because your session is invalid or expired. Please try again.
You need to help the user complete the MFA setup.
What should you do?
- A. From the Microsoft 365 Admin portal, clear the Block this user from signing in option for the user.
- B. Instruct the user to clear their web browser cache.
- C. From the Azure AD portal, reset the user's password.
- D. Instruct the user to complete the setup process within 10 minutes.
- E. Instruct the user to enter the correct verification code.
Answer: C
NEW QUESTION # 44
A company uses Azure Site Recovery (ASR) to replicate and recover Azure virtual machines (VM) between Azure regions.
An administrator receives the following warning from ASR about a VM that uses P10 disks: Data change rate beyond supported limits You add OS Disk Write Bytes/Sec and Data Disk Write Bytes/Sec to the list of metrics for monitoring. You discover that the VM consistently has a data churn of greater than 8 MB/s but less than 10 MB/s.
You need to resolve the issue.
What should you do?
- A. Upgrade the target storage disk.
- B. Use AzCopy to upload data to a cache storage account.
- C. Uninstall the Volume Shadow Copy Service (VSS) Provider service.
- D. Create a network service endpoint in a virtual network.
Answer: A
Explanation:
Azure Site Recovery has limits on data change rates depending on the type of disk used for replication. If a VM has a data change rate higher than the supported limit for its disk type, it can cause replication issues or errors. To resolve this issue, you can upgrade the target storage disk to a higher tier that supports higher data change rates.
NEW QUESTION # 45
A company has virtual machines (VMs) in the following Azure regions:
West Central US
Australia East
The company uses ExpressRoute private peering to provide connectivity to VMs hosted on each region and on-premises services.
The company implements global VNet peering between a VNet in each region. After configuring VNet peering, VM traffic attempts to use ExpressRoute private peering.
You need to ensure that traffic uses global VNet peering instead of ExpressRoute private peering. The solution must preserve existing on-premises connectivity to Azure VNets.
What should you do?
- A. Add a user-defined route to the subnets route table.
- B. Disable the ExpressRoute peering connections for one of the regions.
- C. Add a second VNet to the virtual machines and configure VNet peering between the VNets.
- D. Add a filter to the on-premises routers.
Answer: A
Explanation:
To ensure that traffic uses global VNet peering instead of ExpressRoute private peering, you should add a user-defined route to the subnets route table. According to 2, global VNet peering allows virtual networks across regions to communicate using private IP addresses as if they were in the same region. However, if there is an existing ExpressRoute private peering between two regions that also have global VNet peering enabled, traffic will prefer ExpressRoute over global VNet peering by default. To override this behavior and force traffic to use global VNet peering instead of ExpressRoute private peering for a specific subnet or virtual network gateway connection, you need to add a user-defined route with a next hop type of Virtual Network Peering.
NEW QUESTION # 46
A company uses Active Directory Federation Services {AD FS) to authenticate users to Azure AD. Users report receiving a certificate warning after the company updates the AD FS certificate.
You need to ensure users can sign in to Azure AD. Which PowerShell cmdlet should you use?
- A. Update-MSOLFederatedDosain
- B. Convert-MsolDomalnToFederated
- C. Redo-MsolProvisionUser
- D. Confirm-MsolDomain
- E. Set-MsolOomalnFederatlonSettings
Answer: A
Explanation:
Redo-MsolProvisionUser cmdlet retries the provisioning of a user object in Azure AD that previously failed or was canceled2.
Convert-MsolDomainToFederated cmdlet converts a standard domain to a federated domain3.
Set-MsolDomainFederationSettings cmdlet modifies the settings of an existing federated domain4.
Confirm-MsolDomain cmdlet confirms ownership of a domain after it has been added to Azure AD.
1: Update-MSOLFederatedDomain (MSOnline) 2: Redo-MsolProvisionUser (MSOnline) 3: Convert-MsolDomainToFederated (MSOnline) 4: Set-MsolDomainFederationSettings (MSOnline) : [Confirm-MsolDomain (MSOnline)]
NEW QUESTION # 47
A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active Directory Domain Services (Azure AD DS) instance.
Users report that they are unable to sign into Azure AD DS after being provisioned from Azure AD. You verify the user accounts exist in Azure AD DS.
You need to resolve the issue.
What should you do?
- A. Instruct the users to change their password in Azure AD.
- B. Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable Azure AD DS again.
- C. Deploy Azure AD Connect.
- D. Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS again.
Answer: C
Explanation:
Azure AD doesn't generate or store password hashes in the format that's required for NTLM or Kerberos authentication until you enable Azure AD DS for your tenant. Therefore, Azure AD can't automatically generate these NTLM or Kerberos password hashes based on users' existing credentials.
For cloud-only environments with no on-premises synchronization, you need to instruct users to change their password in Azure AD after enabling Azure AD DS. This will generate the required password hashes and sync them to Azure AD DS within 20 minutes.
NEW QUESTION # 48
A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access.
What should you conclude?
- A. The administrator is using the Microsoft Defender for Cloud free tier.
- B. The VMs were provisioned by using a classic deployment.
- C. The administrator does not have permissions to request JIT access to the VMs.
- D. The administrator does not have the SecurityReader role.
Answer: B
Explanation:
JIT VM access is only supported for VMs that are deployed using the Azure Resource Manager (ARM) deployment model. VMs that are provisioned using the classic deployment model are not compatible with JIT VM access and will be displayed under the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal.
NEW QUESTION # 49
A company implements Windows and Linux VMs in an Azure Virtual Network. The company plans to apply routing changes to the virtual network.
You need to determine the impact of these changes on network latency affecting applications that use TCP and UDP traffic. The solution must provide the highest level of accuracy.
Which tools should you use?
Answer:
Explanation:
NEW QUESTION # 50
A company uses Azure Site Recovery (ASR) to replicate and recover Azure virtual machines (VM) between
Azure regions.
An administrator receives the following warning from ASR about a VM that uses P10 disks: Data change rate
beyond supported limits
You add OS Disk Write Bytes/Sec and Data Disk Write Bytes/Sec to the list of metrics for monitoring. You
discover that the VM consistently has a data churn of greater than 8 MB/s but less than 10 MB/s.
You need to resolve the issue.
What should you do?
- A. Upgrade the target storage disk.
- B. Use AzCopy to upload data to a cache storage account.
- C. Uninstall the Volume Shadow Copy Service (VSS) Provider service.
- D. Create a network service endpoint in a virtual network.
Answer: A
NEW QUESTION # 51
A company implements Azure Firewall and deploys an Azure Firewall policy.
The policy incudes multiple application and network rules for the company's infrastructure. After deployment, an application is not accessible from on-premises computers.
You need to enable diagnostic logging for the following settings:
AzureFirewallApplicationRule
AzureFirewallNetworkRule
AzureFirewallDnsProxy
How should you complete the PowerShell cmdlet?
Answer:
Explanation:
NEW QUESTION # 52
A company uses Azure Site Recovery (ASR) for a VMware environment that includes the following virtual
machines (VMs):
The company reports that they are unable to configure all of the servers for replication.
You need to evaluate the servers and server roles to determine which servers can be protected.
Which server can you protect by using ASR?
- A. VM2
- B. VM3
- C. VM1
- D. VM4
Answer: B
NEW QUESTION # 53
A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?
- A. The partner's VPN device is configured for one VPN tunnel per subnet pair.
- B. The partner's VPN device and VNetGW1 are configured using the same shared key.
- C. The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.
- D. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
Answer: B
NEW QUESTION # 54
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Install the VM guest agent by using administrative permissions.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION # 55
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Enable replication and create a recovery plan for the backup vault.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: A
NEW QUESTION # 56
You need to troubleshoot the sales department issues.
How should you configure the system? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 57
A company deploys a new file sharing application on four Standard_D2_v3 virtual machines (VMs) behind an Azure Load Balancer. The company implements Azure Firewall.
Users report that the application is slow during peak usage periods. An engineer reports that the peak usage for each VM is approximately 1 Gbps.
You need to implement a solution that support a minimum of 10 Gbps.
What should you do to increase the throughput?
- A. Increase the size of the VM instance.
- B. Disable the Azure Firewall and implement network security groups in its place.
- C. Move two of the servers behind a separate load balancer and configure round robin routing in Traffic Manager.
- D. Request an increase in networking quotas.
Answer: C
NEW QUESTION # 58
A company uses an Azure VPN gateway with an IP address of 203.0.113.20.
Users report that the VPN connection frequently drops.
You need to determine when each connection failure occurred.
How should you complete the Azure Monitor query?
Answer:
Explanation:
NEW QUESTION # 59
......
Ultimate AZ-720 Guide to Prepare Free Latest Microsoft Practice Tests Dumps: https://examcollection.bootcamppdf.com/AZ-720-exam-actual-tests.html