Microsoft Microsoft Certified: Azure Support Engineer for Connectivity Specialty AZ-720 Questions & Answers

• Question 81:

  HOTSPOT

  A company named Contoso connects to Azure PaaS services using Azure Private Link. The company has a virtual network named contoso-vn in a resource group named contoso- rg.

  An engineer modifies the Private Link service by using Azure CLI. They are unable to use a source IP address from a subnet named default.

  You need to resolve the issue.

  How should you complete the command?

  Hot Area:

  

  Correct Answer:

  

• Question 82:

  HOTSPOT

  A company implements Windows and Linux VMs in an Azure Virtual Network. The company plans to apply routing changes to the virtual network.

  You need to determine the impact of these changes on network latency affecting applications that use TCP and UDP traffic. The solution must provide the highest level of accuracy.

  Which tools should you use?

  Hot Area:

  

  Correct Answer:

  

• Question 83:

  HOTSPOT

  A customer creates an Azure resource group named RG1 in the East US region. RG1 contains the following resources:

  

  The customer performs the following tasks:

  Create a private endpoint for sqlsrv1 in subnet2 with the private IP address of 192.168.2.100.

  Create a private DNS zone named privatelink.database.windows.net by using a single A record named sqlsvr1 and the IP address 192.168.2.100.

  Disable public access by using the public endpoint for sqlsvr1.

  The customer reports that connections from VM1 to DB1 are failing.

  The solution must allow connections from VM1 to DB1 without making platform-level changes.

  You need to troubleshoot and resolve the issue.

  What should you do?

  Hot Area:

  

  Correct Answer:

  

• Question 84:

  HOTSPOT

  A company named Contoso connects its on-premises resources to Azure by using ExpressRoute.

  An administrator reports that the circuit is in a failed state.

  You need to resolve the issue.

  How should you complete the PowerShell commands?

  Hot Area:

  

  Correct Answer:

  

• Question 85:

  HOTSPOT

  A company deploys a new application and places the application behind an Azure Application Gateway Web Application Firewall (WAF).

  A user with client IP 203.0.113.26 reports that they cannot access the application.

  You need to troubleshoot the issue.

  How should you complete the query?

  Hot Area:

  

  Correct Answer:

  

• Question 86:

  HOTSPOT

  A company has an Azure environment that uses one virtual network.

  The company restructures the environment to use two different virtual networks. Virtual machines in one network cannot communicate with virtual machines in the other virtual network.

  You need to re-establish a connection between virtual machines in the two networks.

  How should you configure the networks?

  Hot Area:

  

  Correct Answer:

  

• Question 87:

  HOTSPOT

  A company has an Azure Active Directory (Azure AD) tenant. You are assigned the Owner role-based access control (RBAC) role of an Azure resource group named RG1.

  An administrator grants a user named User1 the Contributor RBAC role for RG1. User1 receives an authorization error when attempting to create a Cosmos DB account in RG1.

  The administrator verifies that they can create a Cosmos DB account in RG1.

  You need to troubleshoot the issue.

  What should you do?

  Hot Area:

  

  Correct Answer:

  

• Question 88:

  HOTSPOT

  A company is deploying Azure Bastion to provide secure clientless access to its Azure VMs. The company configures a network security group named NSG1.

  During deployment, the following error displays: Network security group NSG1 does not have necessary rules for Azure Bastion Subnet AzureBastionSubnet.

  You need to fix the inbound rules for NSG1.

  How should you complete the configuration?

  Hot Area:

  

  Correct Answer:

  

• Question 89:

  HOTSPOT

  A company connects an on-premises network to an Azure virtual network by using ExpressRoute.

  The ExpressRoute connection is experiencing higher than normal latency.

  You need to confirm the traffic flow.

  How should you complete the PowerShell command?

  Hot Area:

  

  Correct Answer:

  

• Question 90:

  HOTSPOT

  A company creates an Azure resource group named RG1. RG1 has an Azure SQL Database logical server named sqlsvr1 that hosts the following resources:

  

  An administrator grants a user named User1 the Reader RBAC role in RG1. The administrator grants User2 the Contributor role in sqlsvr1.

  User1 reports that they can connect to SQLDB1 from the IP address 155.127.95.212. User1 cannot connect to SQLDB2. User2 can connect to both SQLDB1 and SQLDB2 from the IP address 121.19.27.18. Both users can successfully

  connect to SQLDB1 and SQLDB2 from VM1.

  You are helping the administrator troubleshoot the issue. You run the following PowerShell command:

  Get-AzSqlServerFirewallRule -ResourceGroupName 'RG1' -ServerName 'sqlsvr1'

  The following output displays:

  

  You need to identify the cause for the reported issue and resolve User1's issues. The solution must satisfy the principle of least privilege. What should you do?

  Hot Area:

  

  Correct Answer: