QUESTION: 21

A company deploys the Azure Application Gateway Web Application Firewall (WAF) to protect their web applications.
Users in a remote office location report the following issues: Unable to access part of a web application.
Part of the web application is failing to load.

Parts of the web application has activities that are not performing as expected. You need to troubleshoot the issue.
Which diagnostic log should you review?

Performance
Firewall
Access
Azure Activity

Answer(s): D

Reveal Solution Next Question

QUESTION: 22

A company has an Azure tenant. The company deploys an Azure Firewall named FW1 using the Standard SKU. You configure FW1 using classic firewall rules.
The company creates an application rule collection with the following settings: Priority: 100
Action: Deny Rule type: FQDN
Source type: IP address Source: *
Protocol: http:80,https:443

Target FQDN: *.cloud.contoso.com

An engineer observes that traffic to console.cloud.conotoso.com is still allowed by FW1. You need to determine why the traffic is allowed.
What should you review?

Network rules
Web categories
Infrastructure rules
Application rules

Answer(s): C

Reveal Solution Next Question

QUESTION: 23

A company configures an Azure site-to-site VPN between an on-premises network and an Azure virtual network.
The company reports that after completing the configuration, the VPN connection cannot be established.
You need to troubleshoot the connection issue. What should you do first?

IdentifythesharedkeybyrunningthisPowerShellcmdlet:Get- AzVirtualNetworkGatewayConnectionSharedKey.
IdentifythesharedkeybyrunningthisPowerShellcmdlet:Get- AzVirtualNetworkGatewayConnectionVpnDeviceConfigScript.
Verify the AzureRoot.cer file exists.
Verify the AzureClient.pfx file exists.

Answer(s): B

Reveal Solution Next Question

QUESTION: 24

A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to- site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:

OpenVPN for the tunnel type.
Azure certificate for the authentication type.

Users receive a certificate mismatch error when connecting by using a VPN client. You need to resolve the certificate mismatch error.

What should you do?

Reissue the client certificate with client authentication enabled.
Create a profile manually, add the server FQDN and reissue the client certificate.
Reissue the client certificate with server authentication enabled.
Install an IKEv2 VPN client on the user's computers.

Answer(s): B

Reveal Solution Next Question

Free AZ-720 Exam Braindumps (page: 6)

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24