AZ-720 Online Practice Questions and Answers

HOTSPOT

A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a virtual network named contoso-vn in a resource group named contoso- rg.

An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address from a subnet named default.

You need to resolve the issue.

How should you complete the command?

Hot Area:

HOTSPOT

A company deploys a new application and places the application behind an Azure Application Gateway Web Application Firewall (WAF).

A user with client IP 203.0.113.26 reports that they cannot access the application.

You need to troubleshoot the issue.

How should you complete the query?

Hot Area:

A company has two virtual networks (VNets) that reside in the same Azure region.

An administrator reports that virtual machines (VMs) in each VNet are unable to connect to VMs in the other VNet.

You need to configure a connection between the two networks that maximizes throughput and minimizes latency.

What should you do?

A. Configure a VPN gateway.

B. Create a site-to-site VPN connection.

C. Configure virtual network peering.

D. Create a point-to-site VPN connection.

A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).

An administrator receives an error that password writeback cloud not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:

Error getting auth token

You need to resolve the issue.

Solution: Restart the Azure AD Connect service.

Does the solution meet the goal?

A. Yes

B. No

A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).

An administrator receives an error that password writeback cloud not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:

Error getting auth token

You need to resolve the issue.

Solution: Use a global administrator account with a password that is less than 256 characters to configure Azure AD Connect.

Does the solution meet the goal?

A. Yes

B. No

A company hosts a network virtual appliance (VNA) and Azure Route Server in different virtual networks (VNets). Border Gateway Protocol (BGP) peering is enabled between the NVA loses internet connectivity after it advertises the default

route to the route server.

You need to resolve the problem with the NVA.

What should you do?

A. Configure a user-defined route on the NVA subnet.

B. Move the route server to the same VNet as the NVA.

C. Configure a unique autonomous system number (ASN) on the NVA.

D. Configure a public IP address on the route server.

A company connects their on-premises network by using Azure VPN Gateway. The on- premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).

A new subnet should be unreachable from the on-premises network.

You need to implement a solution.

Solution: Scale the gateway to Generation2.

Does the solution meet the goal?

A. Yes

B. No

A company implements self-service password reset (SSPR).

After a firewall upgrade at the company's datacenter, SSPR stops working.

You need to resolve the issue.

Which two URLs must be present on the firewalls to allow SSPR to connect?

A. *.update.microsoft.com

B. *.servicebus.windows.net

C. *.passwordreset. microsoftonline.com

D. *.svc.ms

E. *.adl.windows.com

A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection.

The company's on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure Virtual Network gateway.

You need to resolve the issue with VM10.

What should you do?

A. Add an outbound security rule to NSG1 that allows outbound traffic from ASG1 to ASG10. Configure the rule to use a priority of 100.

B. In the NSG10 inbound security rule that has a priority of 100, change the destination to ASG10.

C. In the NSG10 inbound security rule that has a priority of 100, change the protocol to Any.

D. In NSG10, remove the inbound security rule that has a priority of 100.

You need to resolve the issue with internet traffic from VM1 being routed directly to the internet. What should you do?

A. Modify IP address prefix of RT12

B. Associate RT12 with Subnet1a.

C. Associate RT12 with Subnet2a.

D. Modify the next hop type of RT12.