HOTSPOT (Drag and Drop is not supported)You have two Azure subscriptions named Sub1 and Sub2. Sub1 is linked to a Microsoft Entra tenant named contoso.com that contains an SAP production landscape. Sub2 is linked to a Microsoft Entra tenant named fabrikam.com and contains an Azure key vault named KV1, a virtual machine named VM1, and a storage account named storage1.You plan to link Sub2 to contoso.com and integrate Sub2 with the SAP landscape.You need to recommend the role that must be used to link Sub2 to contoso.com, and the resources in Sub2 that must be remediated once Sub2 is linked to contoso.com. The solution must follow the principle of least privilege.What should you include in the recommendation? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: OwnerRoleWhen linking a Microsoft Entra tenant subscription to an Azure SAP landscape subscription, the Owner role is the appropriate role to use within the Azure subscription. This role provides the necessary permissions to manage the subscription, including integrating it with the Microsoft Entra tenant.Owner role:This role has the highest level of access to a subscription, allowing the user to manage all aspects of the subscription, including linking it to a Microsoft Entra tenant.Incorrect:* Co-Administrator* Service AdministratorBox 2: KV1ResourceTo securely manage your SAP landscape in Azure, you'll need to link your Azure subscriptions to your Microsoft Entra ID (formerly Azure Active Directory) and utilize Azure Key Vault for storing and managing secrets. This ensures your SAP systems can access necessary credentials without hardcoding them, enhancing security and simplifying deployment.Note: In Azure, remediation refers to the process of taking corrective action to bring resources into compliance with defined policies or recommendations. This is typically achieved by using Azure Policy remediation tasks, which can deploy templates or modify existing resources to ensure they meet the specified requirements.
https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/sap/sap-lza-security-operations
You have an on-premises SAP HANA database. The database is 20 TB and contains tables up to 100 GB.You need to migrate the database to Azure. The solution must meet the following requirements:Support table splitting.Minimize administrative effort.Which migration method should you use?
Answer(s): B
SAP's Database Migration Option (DMO), specifically DMO with System Move, can be used to migrate an on- premises SAP HANA database to Azure. This method combines the database migration and system conversion (e.g., to SAP S/4HANA) into a single step, minimizing downtime by leveraging the Software Update Manager (SUM).Recommended method for SAP HANASAP Database Migration Option (DMO): This is the preferred method for a minimal-downtime migration of SAP HANA to Azure.Software Provisioning Manager (SWPM): DMO is integrated with SWPM, the tool SAP provides for software installations and updates.How it worksConnect to Azure: Establish a connection between your on-premises server and Azure, typically using ExpressRoute or a VPN.Provision Azure resources: Use Azure Resource Manager (ARM) templates to provision the necessary target infrastructure in Azure, including the SAP NetWeaver and SAP HANA database servers.Prepare the source system: Start the SAP Server Update Manager (SUM) on your on-premises SAP application server to prepare for the downtime.Execute the migration: Perform the migration using DMO, which will minimize downtime by exporting the data from the source system and transferring it to the target Azure environment.Incorrect:[Not D]The Azure Database Migration Service (DMS) is not the direct tool for migrating on-premises SAP HANA to Azure.
https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/sap/migrate
You have an Azure subscription named Sub1 that contains a virtual machine named VM1.You have an SAP RISE managed workload that is integrated with Sub1.You plan to use the SAP table connector to ingest data from the managed workload into Azure Data Factory.What should you configure on VM1?
To ingest data from a SAP RISE managed workload into Azure Data Factory (ADF), you need to deploy a Self- Hosted Integration Runtime (SHIR) on an Azure VM within your own subscription, establish network connectivity (like VNet peering) between your subscription and the SAP RISE managed environment, and then configure a Linked Service in ADF that uses the SHIR to connect to the SAP table connector. The SHIR acts as the bridge, allowing ADF to access the private SAP system through the established network connection.1. Establish Network Connectivity*-> 2. Set up the Self-Hosted Integration Runtime (SHIR)Deploy a VM: Create an Azure VM in your subscription. This VM will host the SHIR. It's recommended to use a VM with sufficient CPU cores for better performance, especially when extracting large amounts of data in parallel.Install the SHIR: Download and install the Self-Hosted Integration Runtime software from the Azure Data Factory studio onto the VM. Follow the instructions to register the SHIR with your Data Factory.3. Configure the SAP Table Linked Service in ADF
https://learn.microsoft.com/en-us/azure/sap/workloads/rise-integration-services
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant named contoso.com.You have an SAP landscape in Azure.You need to use an SAP HANA application to enable single sign-on (SSO) to contoso.com.Which authentication protocol should you configure for the application, and what should you upload to the HANA XSA Web Console to enable SSO? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: SAMLProtocolFor single sign-on (SSO) between a Microsoft Entra tenant and a SAP HANA application, you should use the SAML 2.0 protocol. Microsoft Entra ID acts as the identity provider, and you configure it with the SAP HANA application to enable seamless authentication using a secure, standardized protocol.How SAML works for this setupMicrosoft Entra ID as the Identity Provider: When a user tries to access SAP HANA, the application redirects the user to Microsoft Entra ID for authentication.Authentication: The user logs in with their Microsoft Entra ID credentials.SAML Token: After successful authentication, Microsoft Entra ID generates a SAML token containing the user's identity information and sends it back to the SAP HANA application.Authorization: SAP HANA uses the information in the SAML token to grant the user access to the application without needing to log in again.Box 2: The Federation Metadata XMLUploadEarlier:On the Set up Single Sign-On with SAML page, in the SAML Signing Certificate section, select Download to download the Federation Metadata XML from the given options as per your requirement and save it on your computer.Configure SAP HANA SSO1. To configure single sign-on on the SAP HANA side, sign in to your HANA XSA Web Console by going to the respective HTTPS endpoint.2. In the XSA Web Interface, go to SAML Identity Provider. From there, select the + button on the bottom of the screen to display the Add Identity Provider Info pane. Then take the following steps:2a. a. In the Add Identity Provider Info pane, paste the contents of the Metadata XML (which you downloaded) into the Metadata box.¨2b. If the contents of the XML document are valid, the parsing process extracts the information that's required for the Subject, Entity ID, and Issuer fields in the General data screen area. It also extracts the information that's necessary for the URL fields in the Destination screen area, for example, the Base URL and SingleSignOn URL (*) fields.2c. In the Name box of the General Data screen area, enter a name for the new SAML SSO identity provider.3. Select Save to save the details of the SAML identity provider and to add the new SAML IDP to the list of known SAML IDPs.
https://learn.microsoft.com/en-us/entra/identity/saas-apps/saphana-tutorial
You are evaluating the migration plan.Licensing for which SAP product can be affected by changing the size of the virtual machines?
Scenario: Increase the performance of SAP ECC applications by moving to SAP HANA.
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/rhel-sap-hana/
Post your Comments and Discuss Microsoft AZ-120 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-120 content, but please register or login to continue.