HOTSPOT
-
A company uses an Azure Backup agent to back up specific files and folders from an Azure virtual machine (VM) and an on-premises VM.
An administrator reports that the backup job fails on both VMs. Errors are returned in Microsoft Azure Recovery Services (MARS).
You need to troubleshoot the backup issues.
Which troubleshooting solution should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
A company uses Azure Backup Server to back up SQL Server databases that are deployed in an availability group.
The company reports that a backup operation for a database fails. The following error message displays:
Unable to configure protection.
You need to ensure that the backup operation runs successfully.
What should you do?
To ensure that the backup operation runs successfully, you should add the Sysadmin role to the system account on the SQL Server instance. The Sysadmin role provides the necessary permissions for the SQL Server instance to be backed up successfully by Azure Backup Server. Without these permissions, the backup operation may fail due to insufficient privileges. This is critical for configuring protection and executing backups properly.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
A new subnet should be unreachable from the on-premises network.
You need to implement a solution.
Solution: Scale the gateway to Generation2.
Does the solution meet the goal?
Scaling the gateway to Generation 2 does not address the requirement of making a new subnet unreachable from the on-premises network. The task involves network configuration and access control rather than upgrading the VPN gateway's generation. Appropriate solutions might include configuring network security groups (NSGs) or modifying route tables to control access to the new subnet.
A company deploys an Azure Virtual Network gateway. The company connects to the gateway by using a site-to-site VPN connection.
The company's on-premises VPN gateway is reporting an issue with the Phase 1 proposal from the Azure Virtual Network gateway.
You need to troubleshoot the issue by reviewing the logs.
Which log should you analyze?
The Phase 1 proposal of a VPN connection is part of the IKE (Internet Key Exchange) negotiation process, which establishes a secure and authenticated communication channel. Therefore, the IKEDiagnosticLog is the appropriate log to analyze, as it records information about IKE and AuthIP (Authentication Protocol for Internet Protocol) negotiations and logs errors related to these processes.
A company configures an Azure DNS delegated domain.
The DNS zone is marked as degraded.
You need to determine the root cause for the issue.
What are two potential causes for the issue? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A DNS zone marked as degraded can occur if the zone is not hosting actual records that serve its intended purpose. If the zone contains only name server delegation records, it is not actively handling any other DNS records, which can lead to degradation. Similarly, an empty DNS zone, which lacks any DNS records including essential ones like A, CNAME, or NS records, serves no practical function and would also be marked as degraded by Azure.