Microsoft AZ-720 Troubleshooting Microsoft Azure Connectivity Free Practice Test — 30 Questions

Question 1

In a corporate environment, a company has implemented Azure Policy to manage its resources effectively. The IT team is tasked with ensuring that all virtual machines (VMs) deployed in Azure must have a specific tag for cost management purposes. The policy definition is set to enforce the presence of the tag \"CostCenter\" with a value that must be a non-empty string. If a new VM is created without this tag, the policy should deny the creation. Given this scenario, which of the following statements best describes the implications of this policy definition?

Accepted Answer

The policy will automatically add the "CostCenter" tag to any VM that is created without it, ensuring compliance without user intervention.

Question 2

A company is managing multiple Azure resources across different departments, and they want to optimize their resource management by utilizing resource groups effectively. They have a web application, a database, and a virtual network that need to be deployed together for the marketing department. The IT team is considering the best practices for organizing these resources. Which approach should they take to ensure that these resources are managed efficiently and can be easily monitored and controlled?

Accepted Answer

Create a single resource group for the marketing department and include the web application, database, and virtual network within it.

Question 3

In a Hub and Spoke architecture deployed in Microsoft Azure, an organization has multiple spokes representing different departments, each with its own Virtual Network (VNet). The Hub VNet is configured to facilitate communication between these spokes and also to connect to on-premises resources via a VPN Gateway. If the organization wants to implement Network Security Groups (NSGs) to control traffic flow between the spokes while allowing all traffic from the Hub, what would be the most effective approach to ensure that the NSGs are configured correctly to meet these requirements?

Accepted Answer

Apply NSGs to the subnet level of each spoke VNet, allowing inbound traffic from the Hub's IP range and denying all other inbound traffic.

Question 4

A company is planning to set up a new virtual network in Azure that will accommodate multiple subnets for different departments. The IT team has decided to use a Class C IP address range of 192.168.1.0/24 for this virtual network. They want to create three subnets: one for the HR department, one for the Finance department, and one for the IT department. Each department should have at least 30 usable IP addresses. What subnet mask should the IT team use to ensure that each department has enough IP addresses while minimizing wasted IP space?

Accepted Answer

255.255.255.224

Question 5

A cloud architect is troubleshooting a connectivity issue between an Azure Virtual Network (VNet) and an on-premises network. The architect has already verified that the VPN gateway is configured correctly and that the connection status shows \"Connected.\" However, users are still unable to access resources in the Azure VNet. What systematic approach should the architect take to further diagnose and resolve the issue?

Accepted Answer

Check the Network Security Group (NSG) rules associated with the VNet to ensure that inbound and outbound traffic is allowed for the required ports and protocols.

Question 6

A cloud architect is troubleshooting a connectivity issue between an Azure Virtual Network (VNet) and an on-premises network. The architect has already verified that the VPN gateway is configured correctly and that the connection status shows \"Connected.\" However, users are still unable to access resources in the Azure VNet. What systematic approach should the architect take to further diagnose and resolve the issue?

Accepted Answer

Check the Network Security Group (NSG) rules associated with the VNet to ensure that inbound and outbound traffic is allowed for the required ports and protocols.

Question 7

A company is using Azure Monitor to track the performance of its web applications hosted on Azure App Service. They have set up alerts based on specific metrics such as CPU usage, memory consumption, and response time. Recently, they noticed that their application is experiencing intermittent slowdowns, but the metrics do not show any significant spikes. What could be the most effective approach to diagnose the underlying issue using Azure Monitor?

Accepted Answer

Utilize Application Insights to analyze the performance of the application and identify any dependencies that may be causing delays.

Question 8

In a corporate environment, a network engineer is tasked with configuring Azure Network Security Groups (NSGs) to control inbound and outbound traffic for a web application hosted in Azure. The application requires that HTTP traffic on port 80 and HTTPS traffic on port 443 be allowed from any source, while all other traffic should be denied. Additionally, the engineer needs to ensure that traffic from a specific IP address range (192.168.1.0/24) is allowed to access the application on port 8080 for administrative purposes. Given these requirements, what is the correct configuration of the NSG rules?

Accepted Answer

Allow inbound traffic on ports 80 and 443 from any source, allow inbound traffic on port 8080 from 192.168.1.0/24, and deny all other inbound traffic.

Question 9

A company has two Azure Virtual Networks (VNets), VNet1 and VNet2, located in different regions. VNet1 has a CIDR block of 10.0.0.0/16, while VNet2 has a CIDR block of 10.1.0.0/16. The company wants to establish a VNet-to-VNet connection between these two networks. They also need to ensure that the connection is secure and that traffic can flow seamlessly between the two VNets. Which of the following configurations would best facilitate this requirement while adhering to Azure\'s best practices for VNet-to-VNet connections?

Accepted Answer

Create a VPN Gateway in both VNets and configure a Site-to-Site VPN connection between them using the public IP addresses of the gateways.

Question 10

A company is planning to implement an ExpressRoute circuit to enhance its Azure connectivity for a hybrid cloud solution. They have two on-premises data centers located in different geographical regions, and they want to ensure that both data centers can connect to Azure with high availability and low latency. The company is considering two different configurations for their ExpressRoute circuit: a single circuit with two peering locations versus two separate circuits, each connected to one of the data centers. What would be the most effective configuration to achieve their goals of redundancy and performance?

Accepted Answer

Two separate circuits, each connected to one of the data centers

Question 11

A company is planning to establish a hybrid cloud environment using Azure ExpressRoute to connect their on-premises data center to Azure. They have a requirement for a dedicated circuit that can handle a minimum of 1 Gbps of bandwidth. The company also needs to ensure that they can scale their bandwidth as their data transfer needs grow. Given these requirements, which of the following configurations would best meet their needs while also considering cost-effectiveness and future scalability?

Accepted Answer

Provision a Standard ExpressRoute circuit with a bandwidth of 1 Gbps and enable the option for scaling up to 10 Gbps in the future.

Question 12

A company has deployed a multi-tier application in Azure, consisting of a web front-end, application logic, and a database. They are experiencing intermittent connectivity issues between the web front-end and the application tier. The network team decides to use Azure Network Watcher to diagnose the problem. Which of the following features of Azure Network Watcher would be most effective in identifying the root cause of the connectivity issues between these two tiers?

Accepted Answer

Connection Troubleshoot

Question 13

In a scenario where a company is expanding its Azure infrastructure, they are considering different peering types to optimize their network connectivity. The company has a hybrid cloud setup, with on-premises resources and Azure resources. They need to ensure low latency and high throughput for their applications while maintaining security and compliance. Which peering type would best facilitate this requirement, allowing for direct connectivity between Azure and the on-premises network while also providing a secure and reliable connection?

Accepted Answer

Azure ExpressRoute

Question 14

A company has deployed a multi-tier application in Azure, consisting of a web front-end, application logic, and a database. The web front-end is hosted in an Azure App Service, while the application logic runs in Azure Functions. The database is an Azure SQL Database. Users are reporting intermittent connectivity issues when trying to access the application. You suspect that the problem lies within the networking configuration. Which of the following steps should you take first to diagnose the connectivity issue?

Accepted Answer

Check the Azure Network Security Group (NSG) rules associated with the App Service and Azure Functions to ensure that the necessary inbound and outbound traffic is allowed.

Question 15

A network engineer is tasked with diagnosing connectivity issues in a hybrid cloud environment where Azure services are integrated with on-premises infrastructure. The engineer decides to perform a packet capture on a virtual network interface of an Azure VM to analyze the traffic. During the analysis, they observe that the packets are being dropped intermittently. Which of the following factors could most likely contribute to this packet loss during the capture process?

Accepted Answer

Network Security Group (NSG) rules that restrict inbound and outbound traffic

Question 16

In a corporate environment, a cloud architect is tasked with implementing Azure Policy to ensure that all virtual machines (VMs) deployed in the Azure subscription adhere to specific security standards. The architect defines a policy that restricts the VM sizes to a predefined set of sizes that comply with the company\'s performance and cost guidelines. The policy is then assigned to a resource group containing multiple VMs. After deployment, the architect notices that some VMs are still being created with sizes outside the allowed set. What could be the most likely reason for this behavior, considering the Azure Policy evaluation process and its effects on existing resources?

Accepted Answer

The policy was assigned in a mode that only audits existing resources instead of enforcing compliance.

Question 17

In a cloud-based application architecture, a company is evaluating different types of load balancers to optimize traffic distribution across its web servers. The application experiences fluctuating traffic patterns, with peak loads reaching up to 10,000 requests per minute during high-demand periods. The company is considering implementing a Layer 4 load balancer that can handle TCP traffic efficiently. Which of the following characteristics best describes the advantages of using a Layer 4 load balancer in this scenario?

Accepted Answer

It operates at the transport layer, allowing for faster processing of requests by making routing decisions based on IP address and TCP port information, which is crucial for handling high volumes of traffic efficiently.

Question 18

A cloud architect is tasked with setting up alerts for an Azure application that monitors user activity and resource utilization. The architect wants to ensure that alerts are triggered based on specific thresholds for CPU usage and memory consumption. The application should send notifications to the operations team via email and also log these alerts in Azure Monitor for further analysis. If the CPU usage exceeds 80% for more than 5 minutes, or if memory usage exceeds 75% for the same duration, an alert should be generated. What is the best approach to configure these alerts and notifications effectively?

Accepted Answer

Create two separate metrics alerts in Azure Monitor, one for CPU usage and another for memory usage, each with the specified thresholds and notification settings configured to send emails to the operations team and log alerts in Azure Monitor.

Question 19

In a cloud-based application hosted on Microsoft Azure, a network engineer is tasked with diagnosing intermittent connectivity issues between a virtual machine (VM) and an external API service. To gather data, the engineer decides to perform a packet capture on the VM. After capturing the packets, the engineer notices that the packets destined for the API service are being dropped intermittently. Which of the following factors could most likely contribute to this issue?

Accepted Answer

Network Security Group (NSG) rules that restrict outbound traffic to specific IP addresses

Question 20

A multinational company is deploying a web application across multiple Azure regions to ensure high availability and low latency for users worldwide. They decide to use Azure Traffic Manager to manage the traffic routing. The application is hosted in three regions: East US, West Europe, and Southeast Asia. The company wants to implement a routing method that directs users to the nearest endpoint based on their geographic location. Additionally, they want to ensure that if one of the endpoints becomes unavailable, traffic is automatically rerouted to the next closest endpoint without any downtime. Which routing method should the company choose to achieve these objectives?

Accepted Answer

Geographic Routing

Question 21

In a corporate environment implementing a Zero Trust Architecture (ZTA), a security analyst is tasked with evaluating the effectiveness of the identity verification processes in place. The organization has adopted a policy where every user, regardless of their location, must authenticate before accessing any resources. The analyst notices that while the authentication process is robust, there are still instances of unauthorized access attempts. Which of the following strategies would most effectively enhance the Zero Trust model in this scenario?

Accepted Answer

Implementing continuous monitoring and adaptive access controls based on user behavior analytics.

Question 22

A multinational corporation is planning to implement Azure Virtual WAN to optimize its global network connectivity. The company has multiple branch offices across different continents, and they want to ensure seamless connectivity and low latency for their applications. They are considering the use of Azure VPN gateways and ExpressRoute connections. Given the requirements for high availability and redundancy, which configuration would best support their needs while minimizing costs?

Accepted Answer

Deploy Azure Virtual WAN with a combination of VPN gateways and ExpressRoute circuits, ensuring that each branch office connects to the nearest Azure region for optimal performance and redundancy.

Question 23

A company is experiencing intermittent connectivity issues with its Azure resources due to fluctuating network traffic. They are considering scaling their network resources to improve performance. If the company currently has a virtual network with a bandwidth of 1 Gbps and they anticipate a 150% increase in traffic, what would be the minimum bandwidth they should provision to accommodate the expected load without degradation of service?

Accepted Answer

2.5 Gbps

Question 24

A company is planning to deploy a multi-tier application in Azure that requires secure communication between its various components hosted in different Azure Virtual Networks (VNets). The application architecture includes a front-end web application in one VNet, a middle-tier API in another VNet, and a back-end database in a third VNet. The company needs to ensure that the VNets can communicate with each other while maintaining strict security controls. Which solution should the company implement to achieve this?

Accepted Answer

Use VNet Peering between the VNets and configure Network Security Groups (NSGs) to control traffic flow.

Question 25

In a multi-tier application hosted on Azure, you are tasked with optimizing the connectivity between the web tier and the database tier. The application experiences intermittent latency issues, and you suspect that the network configuration may be contributing to the problem. Which best practice should you implement to enhance the connectivity and reduce latency between these tiers?

Accepted Answer

Utilize Azure Virtual Network (VNet) peering to connect the web and database tiers within the same region.

Question 26

A company is experiencing intermittent connectivity issues with its Azure virtual machines (VMs) located in the East US region. The network team suspects that the problem may be related to the Azure Load Balancer configuration. They have set up a standard load balancer with two backend pools, each containing multiple VMs. The team needs to determine the most effective way to troubleshoot the load balancer to identify the root cause of the connectivity issues. What should be the first step in their troubleshooting process?

Accepted Answer

Review the health probe configuration for the backend pools to ensure they are correctly set up and responding.

Question 27

A company is experiencing intermittent connectivity issues with its Azure-hosted application, which is critical for its e-commerce operations. The application is under threat from potential Distributed Denial of Service (DDoS) attacks. The company has implemented Azure DDoS Protection Standard, which provides enhanced DDoS mitigation capabilities. During a recent attack, the application experienced a surge in traffic that peaked at 10 Gbps, while the baseline traffic was typically around 1 Gbps. Given that Azure DDoS Protection Standard uses a combination of traffic monitoring and mitigation techniques, what is the most effective strategy for the company to ensure that legitimate traffic is not affected during such attacks?

Accepted Answer

Configure DDoS Protection to automatically adjust thresholds based on real-time traffic patterns.

Question 28

A company has deployed multiple virtual machines (VMs) across different Azure regions and is experiencing intermittent connectivity issues between these VMs. The network team decides to utilize Azure Network Watcher to diagnose the problem. They want to analyze the network traffic and identify any potential bottlenecks or misconfigurations. Which feature of Azure Network Watcher should they use to gain insights into the network traffic flow between the VMs?

Accepted Answer

Network Security Group (NSG) flow logs

Question 29

A company is deploying a new virtual machine (VM) in Azure that will be accessed remotely via RDP and SSH. The security team has mandated that all remote access must be secured using Network Security Groups (NSGs) and Azure Bastion. The team is also concerned about potential brute-force attacks on the RDP and SSH ports. Given this scenario, which combination of configurations would best enhance the security of the VM while allowing legitimate access?

Accepted Answer

Configure NSGs to allow RDP (port 3389) and SSH (port 22) only from specific IP addresses and deploy Azure Bastion for secure access.

Question 30

A company is migrating its on-premises applications to Azure and needs to ensure secure remote access for its IT administrators. They plan to use RDP for Windows servers and SSH for Linux servers. To enhance security, they decide to implement Just-In-Time (JIT) access and Network Security Groups (NSGs). What is the most effective approach to configure secure RDP and SSH access while minimizing exposure to potential threats?

Accepted Answer

Configure NSGs to allow RDP and SSH access only from specific IP addresses and enable JIT access for both protocols.

Microsoft AZ-720 Troubleshooting Microsoft Azure Connectivity Free Practice Test — 30 Questions

A lot more is already mapped out

About the Microsoft AZ-720 Troubleshooting Microsoft Azure Connectivity Certification