You need to troubleshoot the CosmosDB1 issues from the on-premises environment. What should you use?
A. route command
B. Network Watcher next hop diagnostic tool
C. Network Watcher Connection troubleshoot diagnostic tool
D. nslookup command
You need to resolve the issue with internet traffic from VM1 being routed directly to the internet. What should you do?
A. Modify IP address prefix of RT12
B. Associate RT12 with Subnet1a.
C. Associate RT12 with Subnet2a.
D. Modify the next hop type of RT12.
You need to resolve the VM2 routing issue. What should you do?
A. Modify the IP configuration setting of the Azure network interface resource of VM1.
B. Add a network interface to VM1.
C. Add a network interface to VM2.
D. Modify the IP configuration setting of the Azure network interface resource of VM2.
A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection.
The company's on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure Virtual Network gateway.
You need to resolve the issue with Admin1.
What should you do?
A. Start a full import in Azure AD Connect.
B. Reset the Azure AD Connect service account password in AD DS.
C. Configure Azure AD Connect filtering to include the Admins organizational unit.
D. Enable security inheritance in Active Directory Domain Services (AD DS).
A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection.
The company's on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure Virtual Network gateway.
You need to resolve the issue with VM10.
What should you do?
A. Add an outbound security rule to NSG1 that allows outbound traffic from ASG1 to ASG10. Configure the rule to use a priority of 100.
B. In the NSG10 inbound security rule that has a priority of 100, change the destination to ASG10.
C. In the NSG10 inbound security rule that has a priority of 100, change the protocol to Any.
D. In NSG10, remove the inbound security rule that has a priority of 100.
A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection.
The company's on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure Virtual Network gateway.
You need to resolve the issue reported by the sales team employees.
What should you do?
A. Download the Azure VPN client configuration.
B. Enable IKEv2 on the virtual network gateway.
C. Configure custom routes for the client VPN.
D. Upgrade the virtual network gateway to the VpnGw2 SKU.
E. Install the certificate exported from another client computer.
A company has a virtual machine (VM) named VM1 in a virtual network. The company also uses Azure Firewall Standard.
An administrator creates application rules to filter outbound traffic from VM1 and configure fully qualified domain names (FQDN) on the application rules.
The administrator discovers that outbound traffic from VM1 to the FQDNs are not being filtered by the firewall.
You need to resolve the issue with filtering.
What should you do first?
A. Create a CNAME type DNS record that references the firewall.
B. Upgrade to the Azure Firewall Premium SKU.
C. Configure the firewall for a negative cache.
D. Configure VM1 to use Azure Firewall as its DNS server.
A company configures an Azure DNS delegated domain.
The DNS zone is marked as degraded.
You need to determine the root cause for the issue.
What are two potential causes for the issue? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. The zone contains A records.
B. The zone contains only name server delegation records.
C. The zone contains only glue records.
D. The zone contains an MX record.
E. The zone is empty.
You manage an Azure Firewall named FW1. FW1 includes a policy named Policy1. The policy contains a single rule collection group with the priority 300 and the following settings:
A company hosts a highly available application using Azure Load Balancer.
A virtual machine (VM) on the backend pool stops responding to health probes. The health probes are configured to use HTTP.
You are troubleshooting the incoming traffic issue. You run a Netsh trace on port 80. No incoming packets are detected on the VM. Outgoing packets are detected.
What is the cause of the issue?
A. A network security group is preventing incoming traffic to the port.
B. A proxy is configured.
C. Session persistence is configured.
D. An application on the VM is blocking the port.
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Microsoft exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your AZ-720 exam preparations and Microsoft certification application, do not hesitate to visit our Vcedump.com to find your solutions here.