Troubleshooting Microsoft Azure Connectivity (AZ-720) Practice Exam

Troubleshooting Microsoft Azure Connectivity (AZ-720) Practice Exam

About Troubleshooting Microsoft Azure Connectivity (AZ-720) Practice Exam

The Troubleshooting Microsoft Azure Connectivity (AZ-720)  has been developed to measures the skills and ability of the candidate to accomplish the technical tasks including -

• Handle Troubleshoot business continuity issues
• Handle Troubleshoot hybrid and cloud connectivity issues
• Handle Troubleshoot Platform as a Service issues
• Handle Troubleshoot authentication and access control issues
• Handle Troubleshoot networks
• Handle Troubleshoot VM connectivity issues.
  

Who should take the exam?

• The candidates planning to take the Troubleshooting Microsoft Azure Connectivity (AZ-720) exam should have experience with networking and with hybrid environments together with the knowledge of routing, permissions, and account limits.
• The candidate must be able to use tools to diagnose issues related to business continuity, hybrid environments, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), access control, networking, and virtual machine connectivity.

Course Outline

The Troubleshooting Microsoft Azure Connectivity (AZ-720) Exam covers the following topics - 

Domain 1 - Understanding Troubleshoot business continuity issues (5–10%)

1.1 Explain Troubleshoot backup issues

• Ability to review and interpret backup logs
• Ability to troubleshoot Azure virtual machines backup issues including restarting a failed backup job
• Ability to troubleshoot issues with Azure Backup agents
• Ability to troubleshoot Azure Backup Server issues
• Ability to troubleshoot scheduled backups

1.2 Explain Troubleshoot recovery issues

• Ability to troubleshoot Azure Site Recovery issues
• Ability to troubleshoot site recovery in hybrid scenarios that include Hyper-V, VMware ESX, or System

1.3 Explain Center Configuration Manager

• Ability to troubleshoot restore issues when using Azure Backup Agent, Azure Backup, or Azure Backup Server
• Ability to troubleshoot issues by recovering files from an Azure virtual machine backup

Domain 2 - Understand Troubleshoot hybrid and cloud connectivity issues (20–25%)

2.1 Explain Troubleshoot virtual network (VNet) connectivity

• Ability to troubleshoot virtual private network (VPN) gateway transit issues
• Ability to troubleshoot hub-and-spoke VNet configuration issues
• Ability to troubleshoot global VNet peering connectivity issues
• Ability to troubleshoot peered connections

2.2 Explain Troubleshoot name resolution issues

• Ability to troubleshoot name resolution for scenarios that use Azure-provided name resolution
• Ability to troubleshoot name resolution for scenarios that use custom DNS servers
• Ability to review and interpret DNS audit logs
• Ability to troubleshoot name resolution for Azure private DNS zones
• Ability to troubleshoot issues with DNS records at public DNS providers
• Ability to troubleshoot domain delegation issues

2.3 Explain Troubleshoot point-to-site virtual private network (VPN) connectivity

• Ability to troubleshoot Windows VPN client configuration issues
• Ability to troubleshoot OpenVPN VPN client configuration issues
  
• Ability to troubleshoot macOS VPN client configuration issues
• Ability to troubleshoot issues with certificate-based VPN connections
• Ability to troubleshoot issues with RADIUS-based VPN connections
• Ability to troubleshoot Azure Active Directory (Azure AD) authentication issues

2.4 Explain Troubleshoot site-to-site virtual private network connectivity

• Ability to review and interpret network logs and captured network traffic from a VPN gateway
• Ability to determine the root cause for latency issues within site-to-site VPNs
• Ability to review and interpret gateway configuration scripts
• Ability to reset a VPN gateway
• Ability to troubleshoot gateway issues by running Log Analytics queries

2.5 Explain Troubleshoot Azure ExpressRoute connectivity issues

• Ability to determine whether routes are live and correctly configured
• Ability to validate the peering configuration for an ExpressRoute circuit
• Ability to reset an ExpressRoute circuit
• Ability to troubleshoot route filtering
• Ability to troubleshoot custom-defined routes
• Ability to determine the root cause for latency issues related to ExpressRoute

Domain 3 - Understand Troubleshoot Platform as a Service issues (5–10%)

3.1 Explain Troubleshoot PaaS services

• Ability to troubleshoot issues connecting to a PaaS
• Ability to troubleshoot firewalls for PaaS services
• Ability to troubleshoot PaaS configuration issues
• Ability to determine the root cause for service-level throttling

3.2 Explain Troubleshoot PaaS integration issues

• Ability to troubleshoot issues integrating PaaS services with virtual networks
• Ability to troubleshoot subnet delegation issues
• Ability to troubleshoot issues with private endpoints and service endpoints
• Ability to troubleshoot issues with Azure Private Link

Domain 4 - Troubleshoot authentication and access control issues (15–20%)

4.1 Explain Troubleshoot Azure AD authentication

• Ability to determine why on-premises systems cannot connect to Azure resources
• Ability to troubleshoot Azure AD configuration issues
• Ability to troubleshoot self-service password reset issues
• Ability to troubleshoot issues with multifactor authentication

4.2 Explain Troubleshoot hybrid authentication

• Ability to troubleshoot Azure AD Connect synchronization issues
• Ability to troubleshoot Azure AD to Active Directory Domain Services (Azure AD DS) integration issues
• Ability to troubleshoot connectivity issues between Azure AD and Active Directory Federation Services (AD FS)
• Ability to troubleshoot issues with pass-through authentication and password hash synchronization
• Ability to troubleshoot Azure AD Application Proxy connectivity issues

4.3 Explain Troubleshoot authorization issues

• Ability to troubleshoot role-based access control (RBAC) issues
• Ability to troubleshoot issues storing encrypted passwords in Azure Key Vault
• Ability to troubleshoot sign-in issues related to Azure AD Conditional Access policies

Domain 5 - Troubleshoot networks (25–30%)

5.1 Explain Troubleshoot Azure network security issues

• Ability to determine why Azure Web Application Firewall is blocking traffic
• Ability to troubleshoot encryption and certificate issues for point-to-site and site-to-site scenarios
• Ability to troubleshoot connectivity to secure endpoints

5.2 Explain Troubleshoot Azure network security groups (NSGs)

• Ability to troubleshoot NSG configuration issues
• Ability to review and interpret NSG flow logs
• Ability to determine whether a VM or a group of VMs is associated with an application security group (ASG)

5.3 Explain Troubleshoot Azure Firewall issues

• Ability to troubleshoot application, network, and infrastructure rules
• Ability to troubleshoot network address translation (NAT) and distributed network address translation (DNAT) rules
• Ability to troubleshoot Azure Firewall Manager configuration issues

5.4 Explain Troubleshoot latency issues

• Ability to determine the root cause for VM-level throttling
• Ability to determine the root cause for latency issues when connecting to Azure virtual machines
• Ability to determine the root cause for throttling between source and destination resources
• Ability to troubleshoot bandwidth availability issues
• Ability to determine whether resource response times meet service-level agreements (SLAs)

5.5 Explain Troubleshoot routing and traffic control

• Ability to review and interpret route tables
• Ability to troubleshoot asymmetric routing
  
• Ability to troubleshoot issues with user-defined routes
• Ability to troubleshoot issues related to forced tunneling
• Ability to troubleshoot Border Gateway Protocol (BGP) issues
• Ability to troubleshoot virtual network peering, transitive routing, and service chaining
• Ability to troubleshoot routing configuration issues in Azure

5.6 Explain Troubleshoot load-balancing issues

• Ability to determine whether VMs in a load-balanced cluster are healthy
• Ability to troubleshoot issues with Azure Load Balancer
• Ability to review and interpret load balancer rules
• Ability to troubleshoot traffic distribution issues
• Ability to evaluate the configuration of Azure Traffic Manager
• Ability to troubleshoot issues with Azure Traffic Manager profiles
• Ability to troubleshoot port exhaustion issues
• Ability to troubleshoot issues with Azure Front Door
• Ability to troubleshoot issues with Azure Application Gateway

Domain 6 - Troubleshoot VM connectivity issues (5–10%)

6.1 Explain Troubleshoot Azure Bastion

• Ability to troubleshoot issues deploying Azure Bastion
• Ability to troubleshoot connectivity issues
• Ability to troubleshoot authorization issues

6.2 Explain Troubleshoot just-in-time (JIT) VM access

• Ability to validate connectivity with a VM
• Ability to troubleshoot Microsoft Defender for Cloud configuration issues
• Ability to determine which resources are authorized to use JIT VM access