Free Troubleshooting Microsoft Azure Connectivity Exam AZ-720 Exam Practice Test

A company migrates existing Ubuntu Linux servers from their on-premises vSphere infrastructure to Azure. The virtual machines (VMs) are experiencing a low network throughput of 20 Mbps. The VMs are expected to sustain 300 Mbps. You need to ensure that the VMs are compatible with Azure. Which change should you make?

• Install a kernel name that ends with -azure.
• Configure the network interfaces to 1000 Mbps/full duplex.
• Redeploy the VM with Accelerated Networking enabled.
• Increase the TCP buffers and window size kernel parameters.

A company plans to use an Azure PaaS service by using Azure Private Link service. The azure Private Link service and an endpoint have been configured. The company reports that the endpoint is unable to connect to the service. You need to resolve the connectivity issue. What should you do?

• Disable the endpoint network policies.
• Validate the VPN device.
• Approve the connection state.
• Disable the service network policies.

A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active Directory Domain Services (Azure AD DS) instance. Users report that they are unable to sign into Azure AD DS after being provisioned from Azure AD. You verify the user accounts exist in Azure AD DS. You need to resolve the issue. What should you do?

• Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable Azure AD DS again.
• Deploy Azure AD Connect.
• Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS again.
• You verify the user accounts exist in Azure AD DS. You need to resolve the issue. What should you do? A. Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable Azure AD DS again. B. Deploy Azure AD Connect. C. Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS again. D. Instruct the users to change their password in Azure AD.

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VPN disconnects from time to time. You need to troubleshoot the cause for the disconnections. What should you verify?

• The partner's VPN device and VNetGW1 are configured using the same shared key.
• VNetGW1 has exceeded the subnet Security Association pairs.
• The partner's VPN device and VNetGW1 are configured with the same virtual network address space.
• The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets. Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2. You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet. You discover that FlowLog1 is not reporting outbound flow traffic. You need to resolve the issue with FlowLog1. What should you do?

• Create the storage account for FlowLog1 as a premium block blob.
• Create the storage account for FlowLog1 as a premium page blob.
• Enable FlowLog1 in a network security group associated with the subnet of VM1.
• Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal. The company reports that the Azure VM backup job is failing. You need to troubleshoot the issue. Solution: Install the VM guest agent by using administrative permissions. Does the solution meet the goal?

• Yes
• No

A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP). A new subnet should be unreachable from the on-premises network. You need to implement a solution. Solution: Disable peering on the virtual network. Does the solution meet the goal?

• Yes
• No

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing. The company observes that the VPN disconnects from time to time. You need to troubleshoot the cause for the disconnections. What should you verify?

• The partner's VPN device and VNetGW1 are configured using the same shared key.
• The partner's VPN device is configured for one VPN tunnel per subnet pair.
• The public IP address of the partner's VPN device is configured in the local network gateway address space on VNetGW1.
• The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal. The company reports that the Azure VM backup job is failing. You need to troubleshoot the issue. Solution: Enable replication and create a recovery plan for the backup vault. Does the solution meet the goal?

• Yes
• No

A company has an Azure tenant. The company deploys an Azure Firewall named FW1 using the Standard SKU. You configure FW1 using classic firewall rules. The company creates an application rule collection with the following settings: Priority: 100 Action: Deny Rule type: FQDN Source type: IP address Source: * Protocol: http:80,https:443 Target FQDN: *.cloud.contoso.com An engineer observes that traffic to console.cloud.conotoso.com is still allowed by FW1. You need to determine why the traffic is allowed. What should you review?

• Network rules
• Web categories
• Infrastructure rules
• Application rules