AZ-720 Dumps PDF New [2024] Ultimate Study Guide
AZ-720 Exam Dumps PDF Updated Dump from Test4Cram Guaranteed Success
By passing the Microsoft AZ-720 exam, IT professionals can demonstrate their expertise in troubleshooting Azure connectivity issues, which can lead to new job opportunities and career advancement. Additionally, earning this certification can help organizations ensure that their IT staff has the skills and knowledge needed to maintain a reliable and secure Azure infrastructure.
NEW QUESTION # 67
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD
Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Disable password writeback and then enable password writeback.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION # 68
A company creates an Azure resource group named RG1. RG1 has an Azure SQL Database logical server named sqlsvr1 that hosts the following resources:
An administrator grants a user named User1 the Reader RBAC role in RG1. The administrator grants User2 the Contributor role in sqlsvr1.
User1 reports that they can connect to SQLDB1 from the IP address 155.127.95.212. User1 cannot connect to SQLDB2. User2 can connect to both SQLDB1 and SQLDB2 from the IP address 121.19.27.18. Both users can successfully connect to SQLDB1 and SQLDB2 from VM1.
You are helping the administrator troubleshoot the issue. You run the following PowerShell command:
Get-AzSqlServerFirewallRule -ResourceGroupName 'RG1' -ServerName 'sqlsvr1' The following output displays:
You need to identify the cause for the reported issue and resolve User1's issues. The solution must satisfy the principle of least privilege.
What should you do?
Answer:
Explanation:
NEW QUESTION # 69
A company implements Windows and Linux VMs in an Azure Virtual Network. The company plans to apply routing changes to the virtual network.
You need to determine the impact of these changes on network latency affecting applications that use TCP and UDP traffic. The solution must provide the highest level of accuracy.
Which tools should you use?
Answer:
Explanation:
NEW QUESTION # 70
A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft
Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access.
What should you conclude?
- A. The administrator does not have the SecurityReader role.
- B. The administrator is using the Microsoft Defender for Cloud free tier.
- C. The VMs were recently provisioned by using an Azure Resource Manager deployment.
- D. The VMs were provisioned by using a classic deployment.
Answer: D
NEW QUESTION # 71
A company uses Azure Site Recovery (ASR) for a VMware environment that includes the following virtual
machines (VMs):
The company reports that they are unable to configure all of the servers for replication.
You need to evaluate the servers and server roles to determine which servers can be protected.
Which server can you protect by using ASR?
- A. VM3
- B. VM2
- C. VM4
- D. VM1
Answer: A
NEW QUESTION # 72
A company uses an Azure VPN gateway to connect to their on-premises environment.
The company's on-premises VPN gateway is used by several services. One service is experiencing connectivity issues.
You need to minimize downtime for all services and resolve the connectivity issue.
Which three actions should you perform?
- A. Rest the VPN connection.
- B. Configure the hashing algorithm to be different on both gateways.
- C. Configure the pre-shared key to be the same on the Azure VPN gateway and the on-premises VPN gateways.
- D. Configure the pre-shared key to be different on the Azure VPN gateway and the on-premises VPN gateways.
- E. Configure the hashing algorithm to be the same on both gateways.
- F. Rest the VPN gateway.
Answer: A,C,E
Explanation:
the three actions that should be performed to minimize downtime for all services and resolve the connectivity issue are: C. Configure the pre-shared key to be the same on the Azure VPN gateway and the on-premises VPN gateways. D. Reset the VPN connection. E. Configure the hashing algorithm to be the same on both gateways.
NEW QUESTION # 73
You manage an Azure point-to-site (P2S) VPN deployment. All users connect regularly from their personal Windows computer through a P2S VPN by using certificate-based authentication.
A new user attempts to establish a P25S VPN connection. The user receives the following error message:
A certificate could not be found that can be used with this Extensible Authentication protocol. (Error 798) You need to assists the user with resolving the certificate issue.
What should you do? To answer, drag the appropriate locations to the correct task. Each location maybe used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 74
A company has an Azure Active Directory (Azure AD) tenant. The company deploys Azure AD Connect to synchronize users from an Active Directory Domain Services (AD DS).
The synchronization of a user object is failing.
You need to troubleshoot the failing synchronization by using a built-in Azure AD Connect troubleshooting task.
Which two pieces of information should you collect before you start troubleshooting?
- A. Object globally unique identifier
- B. AD connector name
- C. Object distinguished name
- D. Object common name
- E. Azure AD connector name
Answer: B,C
Explanation:
the two pieces of information that should be collected before starting to troubleshoot the failing synchronization by using a built-in Azure AD Connect troubleshooting task are: B. AD connector name E. Object distinguished name Azure AD Connect is a tool used to synchronize users from an on-premises Active Directory Domain Services (AD DS) to Azure AD. When troubleshooting synchronization issues, it is important to have information about the object that is failing to synchronize. The AD connector name refers to the name of the connector used to connect to the on-premises AD DS. The object distinguished name refers to the unique identifier of the object in the on-premises AD DS. Having this information can help identify and resolve synchronization issues.
NEW QUESTION # 75
You need to resolve the connectivity issue with the on-premises database named CosmosDB1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 76
A company develops an Azure Cosmos DB solution.
The solution has the following components:
A virtual network named VNet1 in a resource group named RG1.
A subnet named Subnet1 in VNet1.
A Private Link service.
The company is unable to configure a source IP address for the Private Link service from Subnet1.
You need to resolve the issue for Subnet1.
How should you complete the PowerShell commands?
Answer:
Explanation:
NEW QUESTION # 77
A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network.
You need to implement a solution.
Solution: Configure a route table with route propagation disabled.
Does the solution meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION # 78
A company deploys just-in-time (JIT) virtual machine (VM) access.
A user reports that they are unable to request access to a JIT VM.
You need to determine the permission operations that are required for the user to request JIT access. The solution should use the principle of least privilege.
Which permission operations are required? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 79
You need to troubleshoot the issues with the SharePoint workload in VNet2.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 80
A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection.
The company's on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure Virtual Network gateway.
You need to troubleshoot the issue by reviewing the logs.
Which log should you analyze?
- A. GatewayDiagnosticLog
- B. RouteDiagnosticLog
- C. P2SDiagnosticLog
- D. IKEDiagnosticLog
Answer: D
Explanation:
To troubleshoot an issue with the Phase 1 proposal from an Azure Virtual Network gateway when connecting to a site-to-site VPN connection by reviewing logs, you should analyze the IKE Diagnostic log. Therefore, option C is correct. You should analyze the IKE Diagnostic log.
NEW QUESTION # 81
A company deploys the Azure Application Gateway Web Application Firewall (WAF) to protect their web
applications.
Users in a remote office location report the following issues:
* Unable to access part of a web application.
* Part of the web application is failing to load.
* Parts of the web application has activities that are not performing as expected.
You need to troubleshoot the issue.
Which diagnostic log should you review?
- A. Access
- B. Performance
- C. Firewall
- D. Azure Activity
Answer: D
NEW QUESTION # 82
You need to troubleshoot the issue reported by Blue Yonder Airlines.
Which diagnostic log should you review?
- A. TunnelDiagnosticLog
- B. GatewayDiagnosticLog
- C. RouteDiagnosticLog
- D. IKEDiagnosticLog
Answer: D
Explanation:
To troubleshoot the issue reported by Blue Yonder Airlines, you need to review the IKEDiagnosticLog, which contains information about the Internet Key Exchange (IKE) protocol that is used to establish IPsec VPN connections. The IKEDiagnosticLog can help you identify the cause of the VPN disconnections and IPsec failure to connect errors, such as mismatched authentication parameters, incorrect pre-shared keys, or network connectivity issues. You can enable and download the IKEDiagnosticLog from the Azure portal or by using PowerShell commands
NEW QUESTION # 83
......
Microsoft Azure cloud platform is one of the most widely used cloud computing services in the world, and it is used by businesses and individuals alike for a wide range of purposes. However, like any complex technology, Azure can sometimes experience connectivity issues that can cause disruptions and problems for users. To help address these issues, Microsoft offers the AZ-720 certification exam, which is designed to assess candidates' ability to troubleshoot Azure connectivity issues.
Pass Your Microsoft Exam with AZ-720 Exam Dumps: https://www.test4cram.com/AZ-720_real-exam-dumps.html
AZ-720 Exam Dumps - Microsoft Practice Test Questions: https://drive.google.com/open?id=16wi91eMDdddnJ6k8lGU6k_sgedMn9yRB