Free Microsoft AZ-720 Exam Dumps Questions & Answers

A company has an ExpressRoute gateway between their on-premises site and Azure. The ExpressRoute gateway is on a virtual network named VNet1. The company enables FastPath on the gateway. You associate a network security group (NSG) with all of the subnets.
Users report issues connecting to VM1 from the on-premises environment. VM1 is on a virtual network named VNet2. Virtual network peering is enabled between VNet1 and VNet2.
You create a flow log named FlowLog1 and enable it on the NSG associated with the gateway subnet.
You discover that FlowLog1 is not reporting outbound flow traffic.
You need to resolve the issue with FlowLog1.
What should you do?

• A.Configure the FlowTimeoutInMinutes property on VNet1 to a non-null value.
• B.Configure the FlowTimeoutInMinutes property on VNet2 to a non-null value.
• C.Configure FlowLog1 for version 2.
• D.Enable FlowLog1 in a network security group associated with the subnet of VM1.

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client.
You need to resolve the certificate mismatch error.
What should you do?

• A.Install an IKEv2 VPN client on the user's computers.
• B.Create a profile manually, add the server FQDN and reissue the client certificate.
• C.Reissue the client certificate with server authentication enabled.
• D.Reissue the client certificate with client authentication enabled.

A company is deploying Azure Bastion to provide secure clientless access to its Azure VMs. The company configures a network security group named NSG1.
During deployment, the following error displays: Network security group NSG1 does not have necessary rules for Azure Bastion Subnet AzureBastionSubnet.
You need to fix the inbound rules for NSG1.
How should you complete the configuration?

Correct Answer:

A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.
The company observes that the VPN disconnects from time to time.
You need to troubleshoot the cause for the disconnections.
What should you verify?

• A.The partner's VPN device is enabled for Perfect forward secrecy.
• B.The IP address of the local network gateway matches the partner's VPN device.
• C.The partner's VPN device and VNetGW1 are configured using the same shared key.
• D.The partner's VPN device and VNetGW1 are configured with the same virtual network address space.

A company has a virtual machine (VM) named VM1 in a virtual network. The company also uses Azure Firewall Standard.
An administrator creates application rules to filter outbound traffic from VM1 and configure fully qualified domain names (FQDN) on the application rules.
The administrator discovers that outbound traffic from VM1 to the FQDNs are not being filtered by the firewall.
You need to resolve the issue with filtering.
What should you do first?

• A.Configure the firewall for a negative cache.
• B.Upgrade to the Azure Firewall Premium SKU.
• C.Create a DNAT rule to route traffic to VM1.
• D.Configure VM1 to use Azure Firewall as its DNS server.