[Q62-Q77] Microsoft AZ-720 Practice Verified Answers – Pass Your Exams For Sure! [2024]

admin • July 10, 2024

[Q62-Q77] Microsoft AZ-720 Practice Verified Answers – Pass Your Exams For Sure! [2024]

Rate this post

Microsoft AZ-720 Practice Verified Answers – Pass Your Exams For Sure! [2024]

Valid Way To Pass Microsoft Certified: Azure Support Engineer for Connectivity Specialty’s AZ-720 Exam

NO.62 A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection.
The company’s on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure Virtual Network gateway.
You need to troubleshoot the issue by reviewing the logs.
Which log should you analyze?

P2SDiagnosticLog

GatewayDiagnosticLog

IKEDiagnosticLog

RouteDiagnosticLog

To troubleshoot an issue with the Phase 1 proposal from an Azure Virtual Network gateway when connecting to a site-to-site VPN connection by reviewing logs, you should analyze the IKE Diagnostic log. Therefore, option C is correct. You should analyze the IKE Diagnostic log.

NO.63 A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?

Install an IKEv2 VPN client on the user’s computers.

Reissue the client certificate with client authentication enabled.

Create a profile manually, add the server FQDN and reissue the client certificate.

Configure the tunnel type for IKEv2 and OpenVPN on VNetGW1.

To resolve the certificate mismatch error, you should reissue the client certificate with client authentication enabled. According to 1, when you use Azure certificate for authentication type on point-to-site VPN connections, you need to ensure that your client certificates have client authentication as one of their enhanced key usage attributes. Otherwise, you will receive a certificate mismatch error when connecting by using a VPN client.

NO.64 You need to troubleshoot the Azure Key Vault issues.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.65 You need to troubleshoot the issues reported by Agent1.
What should you review? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

NO.66 A company implements self-service password reset (SSPR).
After a firewall upgrade at the company’s datacenter, SSPR stops working.
You need to resolve the issue.
Which two URLs must be present on the firewalls to allow SSPR to connect?

*.update.microsoft.com

*.servicebus.windows.net

*.passwordreset. microsoftonline.com

*.svc.ms

*.adl.windows.com

Self-service password reset (SSPR) is a feature in Azure Active Directory (Azure AD) that allows users to reset their passwords on their own. To ensure that SSPR works correctly, certain URLs must be accessible from the user’s network. These URLs include *.passwordreset.microsoftonline.com and *.svc.ms, which are used for SSPR authentication and service communications.

NO.67 You need to troubleshoot and resolve the reverse DNS lookup issues.
What should you do? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.

NO.68 You need to resolve the issue with Admin1.
What should you do?

Configure Azure AD Connect filtering to include the Admins organizational unit.

Reset the Azure AD Connect service account password in AD DS.

Enable security inheritance in Active Directory Domain Services (AD DS).

Start a full import in Azure AD Connect.

The error 8344 insufficient access rights to perform the operation indicates that the Azure AD Connect service account does not have the required permissions to synchronize the Admin1 account. This could be because the Admin1 account is in an organizational unit (OU) that has security inheritance disabled, which prevents the service account from inheriting the necessary permissions from the parent OU. To resolve this issue, you should enable security inheritance in AD DS for the OU that contains the Admin1 account. This will allow the service account to synchronize the Admin1 account to Azure AD. Alternatively, you could also grant the service account explicit permissions on the Admin1 account, but this would be more tedious and less scalable than enabling security inheritance.

NO.69 A company has an Azure Active Directory (Azure AD) tenant. You are assigned the Owner role-based access control (RBAC) role of an Azure resource group named RG1.
An administrator grants a user named User1 the Contributor RBAC role for RG1. User1 receives an authorization error when attempting to create a Cosmos DB account in RG1.
The administrator verifies that they can create a Cosmos DB account in RG1.
You need to troubleshoot the issue.
What should you do?

NO.70 A company has two virtual networks (VNets) that are configured to use peering. Several Azure virtual machines are connected to each network. An on-premises network is connected to one of the VNets by using Azure VPN Gateway.
An administrator reports that communication between applications across the VNets is failing.
You need to troubleshoot the issue.
Which two features can you use to achieve the goal?

IP flow verify

AzureNetworkWatchExtension

Next hop

Network Watcher topology

NSG flow logs

NO.71 A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing.
You need to troubleshoot the issue.
What should you do?

Create a new manual backup in Backup center.

Run chkdsk on the VM.

Configure the retention range of the current backup policy for the VM.

Install the VM guest agent with administrative permissions.

Enable replication and create a recovery plan for the backup vault.

According to Microsoft Azure’s troubleshooting documentation, one of the steps to troubleshoot backup failures on Azure virtual machines is to check the Azure VM Guest Agent service health. You should ensure that the Azure VM Guest Agent service is started and up-to-date 1. On a Windows VM, you can navigate to services.msc and ensure that the Windows Azure VM Guest Agent service is up and running. Also, ensure that the latest version is installed 2

NO.72 A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment
includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network.
You need to implement a solution.
Solution: Scale the gateway to Generation2.
Does the solution meet the goal?

Yes

NO.73 A company uses public Azure DNS zones.
The company reports DNS record creation and name resolution issues.
You need to troubleshoot the issues.
What are the causes of the issues?

NO.74 A company deploys Azure Traffic Manager load balancing for an Azure App Service solution.
Load balancing performance is showing a degraded status after deployment, and new HTTPS probes are
failing to reach the Traffic Manager endpoints.
You need to troubleshoot the probe failure.
How should you complete the PowerShell script?

NO.75 A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network.
You need to implement a solution.
Solution: Disable peering on the virtual network.
Does the solution meet the goal?

Yes

NO.76 You need to troubleshoot the CosmosDB1 issues from the on-premises environment. What should you use?

route command

Network Watcher next hop diagnostic tool

Network Watcher Connection troubleshoot diagnostic tool

nslookup command

This tool helps you troubleshoot network connectivity issues from a virtual machine to a given endpoint. It tests for reachability from the virtual machine to the endpoint and provides information about why a connection fails1. In this case, you can use this tool to troubleshoot the connectivity issues from the on-premises environment to CosmosDB1.

NO.77 A company uses Azure Site Recovery for an on-premises server.
The company reports that replication of the server to Azure has failed.
You need to inspect the logs on the server to troubleshoot the issue.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.