Description

Questions: 120
Release Date: 08/2022
Job Role: Support Engineer
Language: English

The AZ-720 practice test contains 120 questions and covers the following objectives: 

Troubleshoot business continuity issues –10 questions

Troubleshoot backup issues

• Review and interpret backup logs  
• Troubleshoot Azure virtual machines backup issues including restarting a failed backup job  
• Troubleshoot issues with Azure Backup agents  
• Troubleshoot Azure Backup Server issues 
• Troubleshoot scheduled backups  

Troubleshoot recovery issues

• Troubleshoot Azure Site Recovery issues  
• Troubleshoot site recovery in hybrid scenarios that include Hyper-V, VMware ESX, or System Center Configuration Manager  
• Troubleshoot restore issues when using Azure Backup Agent, Azure backup, or Azure Backup Server  
• Troubleshoot issues recovering files from an Azure virtual machine backup  

Troubleshoot hybrid and cloud connectivity issues – 30 questions

Troubleshoot virtual network (VNet) connectivity

• Troubleshoot virtual private network (VPN) gateway transit issues  
• Troubleshoot hub-and-spoke VNet configuration issues  
• Troubleshoot global VNet peering connectivity issues  
• Troubleshoot peered connections  

Troubleshoot name resolution issues

• Troubleshoot name resolution for scenarios that use Azure-provided name resolution  
• Troubleshoot name resolution for scenarios that use custom DNS servers  
• Review and interpret DNS audit logs  
• Troubleshoot name resolution for Azure private DNS zones  
• Troubleshoot issues with DNS records at public DNS providers
• Troubleshoot domain delegation issues  

Troubleshoot point-to-site virtual private network (VPN) connectivity

• Troubleshoot Windows VPN client configuration issues  
• Troubleshoot OpenVPN VPN client configuration issues
• Troubleshoot macOS VPN client configuration issues  
• Troubleshoot issues with certificate-based VPN connections  
• Troubleshoot issues with RADIUS-based VPN connections  
• Troubleshoot Azure Active Directory (Azure AD) authentication issue

Troubleshoot site-to-site virtual private network connectivity

• Review and interpret network logs and captured network traffic from a VPN gateway  
• Determine the root cause for latency issues within site-to-site VPNs  
• Review and interpret gateway configuration scripts  
• Reset a VPN gateway  
• Troubleshoot gateway issues by running Log Analytics queries  

Troubleshoot Azure ExpressRoute connectivity issues

• Determine whether routes are live and correctly configured
• Validate the peering configuration for an ExpressRoute circuit  
• Reset an ExpressRoute circuit  
• Troubleshoot route filtering  
• Troubleshoot custom defined routes  
• Determine the root cause for latency issues related to ExpressRoute  

Troubleshoot Platform as a Service issues – 10 questions

Troubleshoot PaaS services

• Troubleshoot issues connecting to a PaaS  
• Troubleshoot firewalls for PaaS services  
• Troubleshoot PaaS configuration issues  
• Determine the root cause for service-level throttling  

 Troubleshoot PaaS integration issues

• Troubleshoot issues integrating PaaS services with virtual networks
• Troubleshoot subnet delegation issues  
• Troubleshoot issues with private endpoints and service endpoints T
• Troubleshoot issues with Azure Private Link  

Troubleshoot authentication and access control issues – 22 questions

Troubleshoot Azure AD authentication  

• Determine why on-premises systems cannot connect to Azure resources  
• Troubleshoot Azure AD configuration issues  
• Troubleshoot self-service password reset issues  
• Troubleshoot issues with multifactor authentication  

Troubleshoot hybrid authentication

• Troubleshoot Azure AD Connect synchronization issues  
• Troubleshoot Azure AD to Active Directory Domain Services (Azure AD DS) integration issues  
• Troubleshoot connectivity issues between Azure AD and Active Directory Federation Services (AD FS)  
• Troubleshoot issues with pass-through authentication and password hash synchronization  
• Troubleshoot Azure AD Application Proxy connectivity issues  

Troubleshoot authorization issues

• Troubleshoot role-based access control (RBAC) issues  
• Troubleshoot issues storing encrypted passwords in Azure Key Vault  
• Troubleshoot sign-in issues related to Azure AD Conditional Access policies  

Troubleshoot networks – 38 questions

Troubleshoot Azure network security issues

• Determine why Azure Web Application Firewall is blocking traffic  
• Troubleshoot encryption and certificate issues for point-to-site and site-to-site scenarios  
• Troubleshoot connectivity to secure endpoints Troubleshoot Azure network security groups (NSGs)  
• Troubleshoot NSG configuration issues  
• Review and interpret NSG flow logs  
• Determine whether a VM or a group of VMs is associated with an application security group (ASG)  

Troubleshoot Azure Firewall issues  

• Troubleshoot application, network, and infrastructure rules  
• Troubleshoot network address translation (NAT) and distributed network address translation (DNAT) rules  
• Troubleshoot Azure Firewall Manager configuration issues Troubleshoot latency issues  
• Determine the root cause for VM-level throttling  
• Determine the root cause for latency issues when connecting to Azure virtual machines  
• Determine the root cause for throttling between source and destination resources  
• Troubleshoot bandwidth availability issues  
• Determine whether resource response times meet service-level agreements (SLAs)  

Troubleshoot routing and traffic control

• Review and interpret route tables  
• Troubleshoot asymmetric routing  
• Troubleshoot issues with user-defined routes  
• Troubleshoot issues related to forced tunneling  
• Troubleshoot Border Gateway Protocol (BGP) issues  
• Troubleshoot virtual network peering, transitive routing, and service chaining  
• Troubleshoot routing configuration issues in Azure  

Troubleshoot load-balancing issues

• Determine whether VMs in a load-balanced cluster are healthy  
• Troubleshoot issues with Azure Load Balancer  
• Review and interpret load balancer rules  
• Troubleshoot traffic distribution issues  
• Evaluate the configuration of Azure Traffic Manager  
• Troubleshoot issues with Azure Traffic Manager profiles  
• Troubleshoot port exhaustion issues  
• Troubleshoot issues with Azure Front Door  
• Troubleshoot issues with Azure Application Gateway  

Troubleshoot VM connectivity issues – 10 questions

Troubleshoot Azure Bastion

• Troubleshoot issues deploying Azure Bastion  
• Troubleshoot connectivity issues  
• Troubleshoot authorization issues  

Troubleshoot just-in-time (JIT) VM access

• Validate connectivity with a VM  
• Troubleshoot Microsoft Defender for Cloud configuration issues  
• Determine which resources are authorized to use JIT VM access 

Notes: 

• The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam. 
• Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.