[Q34-Q57] 100% Free AZ-720 Exam Dumps Use Real Microsoft Certified: Azure Support Engineer for Connectivity Specialty Dumps With 82 Questions!

100% Free AZ-720 Exam Dumps Use Real Microsoft Certified: Azure Support Engineer for Connectivity Specialty Dumps With 82 Questions!

Pass Your AZ-720 Exam Easily With 100% Exam Passing Guarantee [2022]

Exam AZ-720: Troubleshooting Microsoft Azure Connectivity

Candidates for this exam should have experience with networking and with hybrid environments, including knowledge of routing, permissions, and account limits. They must be able to use available tools to diagnose issues related to business continuity, hybrid environments, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), access control, networking, and virtual machines connectivity.

Passing score: 700. Learn more about exam scores.

Part of the requirements for: Microsoft Certified: Azure Support Engineer for Connectivity Specialty

Download exam skills outline

Schedule exam

Languages: English

Retirement date: none

This exam measures your ability to accomplish the following technical tasks: troubleshoot business continuity issues; troubleshoot hybrid and cloud connectivity issues; troubleshoot Platform as a Service issues; troubleshoot authentication and access control issues; troubleshoot networks; and troubleshoot VM connectivity issues.

NEW QUESTION 34
A company deploys an Azure Firewall. The company reports the following log entry:

For each of the following questions, select Yes or No.

Answer:

Explanation:

NEW QUESTION 35
A company uses an Azure blob container.
The IT department has a service-level agreement (SLA) that requests on average cannot exceed 20 milliseconds.
You need to implement a log analytics query to generate the SLA report.
How should you complete the query?

Answer:

Explanation:

NEW QUESTION 36
A company has two virtual networks (VNets) that are configured to use peering. Several Azure virtual machines are connected to each network. An on-premises network is connected to one of the VNets by using Azure VPN Gateway.
An administrator reports that communication between applications across the VNets is failing.
You need to troubleshoot the issue.
Which two features can you use to achieve the goal?

A. Next hop
B. AzureNetworkWatchExtension
C. NSG flow logs
D. IP flow verify
E. Network Watcher topology

Answer: A,D

NEW QUESTION 37
A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a
partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?

A. The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.
B. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
C. VNetGW1 has exceeded the subnet Security Association pairs.
D. The partner's VPN device and VNetGW1 are configured using the same shared key.

Answer: D

NEW QUESTION 38
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
What should you do?

A. Install the VM guest agent with administrative permissions.
B. Run chkdsk on the VM.
C. Enable replication and create a recovery plan for the backup vault.
D. Configure the retention range of the current backup policy for the VM.
E. Create a new manual backup in Backup center.

Answer: A

NEW QUESTION 39
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD
Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Restart the Azure AD Connect service.
Does the solution meet the goal?

A. No
B. Yes

Answer: A

NEW QUESTION 40
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Configure the retention range for the current VM backup policy.
Does the solution meet the goal?

A. No
B. Yes

Answer: B

NEW QUESTION 41
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD
Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Use a global administrator account with a password that is less than 256 characters to configure
Azure AD Connect.
Does the solution meet the goal?

A. No
B. Yes

Answer: B

NEW QUESTION 42
A company uses Azure Active Directory (Azure AD) with Azure role-based access control (RBAC) for access to resources.
Some users report that they are unable to grant RBAC roles to other users.
You need to troubleshoot the issue.
How should you complete the Azure Monitor query?

Answer:

Explanation:

NEW QUESTION 43
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?

A. Reissue the client certificate with server authentication enabled.
B. Reissue the client certificate with client authentication enabled.
C. Create a profile manually, add the server FQDN and reissue the client certificate.
D. Install an IKEv2 VPN client on the user's computers.

Answer: C

NEW QUESTION 44
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?

A. Configure preshared key for authentication on the VPN profile.
B. Reissue the client certificate with client authentication enabled.
C. Install an IKEv2 VPN client on the user's computers.
D. Reissue the client certificate with server authentication enabled.

Answer: D

NEW QUESTION 45
A company deploys Azure Traffic Manager load balancing for an Azure App Service solution.
Load balancing performance is showing a degraded status after deployment, and new HTTPS probes are
failing to reach the Traffic Manager endpoints.
You need to troubleshoot the probe failure.
How should you complete the PowerShell script?

Answer:

Explanation:

NEW QUESTION 46
A company uses public Azure DNS zones.
The company reports DNS record creation and name resolution issues.
You need to troubleshoot the issues.
What are the causes of the issues?

Answer:

Explanation:

NEW QUESTION 47
A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a
partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?

A. The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
B. The partner's VPN device and VNetGW1 are configured using the same shared key.
C. The partner's VPN device is configured for one VPN tunnel per subnet pair.
D. The public IP address of the partner's VPN device is configured in the local network gateway address
space on VNetGW1.

Answer: B

NEW QUESTION 48
A company uses public Azure DNS zones.
The company reports DNS record creation and name resolution issues.
You need to troubleshoot the issues.
What are the causes of the issues?

Answer:

Explanation:

NEW QUESTION 49
A company attempts to implement just-in-time (JIT) access for a virtual machine (VM) named VM1.
The company reports that they are unable to complete the process.
You need to implement JIT access and test the deployment.
Which PowerShell cmdlets should you run?

Answer:

Explanation:

NEW QUESTION 50
A company has on-premises application server that runs in System Center Virtual Machine Manager
(SCVMM). The company configures Azure Site Recovery.
An administrator at the company reports that they receive an error message. The error message indicates that
there are replication issues.
You need to troubleshoot the issue.
Which log should you review?

A. SCVMM debug log
B. Network Watcher diagnostic log
C. Network Security Group flow log
D. Azure Monitor log

Answer: C

NEW QUESTION 51
A company uses Azure Site Recovery for their on-premises Hyper-V servers. The company manages servers by using System Center Virtual Machine Manager (SCVMM).
An administrator reports that replication to the secondary site has failed.
You need to inspect the SCVMM logs and configuration files.

Answer:

Explanation:

NEW QUESTION 52
A company deploys ExpressRoute.
The company reports that there is an autonomous system (AS) number mismatch.
You need to identify the AS number of the circuit.
Which PowerShell cmdlet should you run?

A. Get-AzExpressRouteCircuit
B. Get-AzExpressRouteCircuitPeeringConfig
C. Get-AzExpressRouteCircuitStats
D. Get-AzExpressRouteCircuitRouteTable

Answer: C

NEW QUESTION 53
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables
backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
Solution: Configure the retention range for the current VM backup policy.
Does the solution meet the goal?

A. No
B. Yes

Answer: B

NEW QUESTION 54
A company plans to use an Azure PaaS service by using Azure Private Link service. The azure Private Link
service and an endpoint have been configured.
The company reports that the endpoint is unable to connect to the service.
You need to resolve the connectivity issue.
What should you do?

A. Validate the VPN device.
B. Approve the connection state.
C. Disable the endpoint network policies.
D. Disable the service network policies.

Answer: D

NEW QUESTION 55
A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure.
The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are expected to sustain 300 Mbps.
You need to ensure that the VMs are compatible with Azure.
Which change should you make?

A. Redeploy the VM with Accelerated Networking enabled.
B. Increase the TCP buffers and window size kernel parameters.
C. Configure the network interfaces to 1000 Mbps/full duplex.
D. Install a kernel name that ends with -azure.

Answer: C

NEW QUESTION 56
A company is deploying Azure Bastion to provide secure clientless access to its Azure VMs. The company
configures a network security group named NSG1.
During deployment, the following error displays: Network security group NSG1 does not have necessary rules
for Azure Bastion Subnet AzureBastionSubnet.
You need to fix the inbound rules for NSG1.
How should you complete the configuration?