QUESTION: 13

This question requires that you evaluate the underlined text to determine if it is correct.
You have an Azure resource group that contains the virtual machines for an SAP environment.
You must be assigned the Contributor role to grant permissions to the resource group.
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.

No change is needed
User Access Administrator
Managed Identity Contributor
Security Admin

Answer(s): B

Explanation:

Contributor - Can create and manage all types of Azure resources but can't grant access to others.
User Access Administrator - Lets you manage user access to Azure resources.

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

Reveal Solution Next Question

QUESTION: 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy SAP HANA on Azure (Large Instances).
You need to back up the SAP HANA database to Azure.
Solution: You create a Recovery Services vault and a backup policy.
Does this meet the goal?

Yes
No

Answer(s): B

Explanation:

Backup architecture
- The backup process begins by creating a Recovery services vault in Azure. This vault will be used to store the backups and recovery points created over time.
- The Azure VM running SAP HANA server is registered with the vault, and the databases to be backed-up are discovered. To enable the Azure Backup service to discover databases, a preregistration script must be run on the HANA server as a root user.
- This script creates AZUREWLBACKUPHANAUSER DB user and a corresponding key with the same name in hdbuserstore. Refer to the setting up permissions section to understand more about what the script does.
- Azure Backup Service now installs the Azure Backup Plugin for HANA on the registered SAP HANA server.
- The AZUREWLBACKUPHANAUSER DB user created by the preregistration script is used by the Azure Backup Plugin for HANA to perform all backup and restore operations. If you attempt to configure backup for SAP HANA DBs without running this script, you might receive the following error:
UserErrorHanaScriptNotRun.
- To configure backup on the databases that are discovered, choose the required backup policy and enable backups.
- Once the backup is configured, Azure Backup service sets up the Backint parameters at the DATABASE level on the protected SAP HANA server.
- The Azure Backup Plugin for HANA maintains all the backup schedules and policy details. It triggers the scheduled backups and communicates with the HANA
Backup Engine through the Backint APIs.
- The HANA Backup Engine returns a Backint stream with the data to be backed up.
- All the scheduled backups and on-demand backups (triggered from the Azure portal) that are either full or differential are initiated by the Azure Backup Plugin for HANA. However, log backups are managed and triggered by HANA Backup Engineitself.

Reference:

https://docs.microsoft.com/en-us/azure/backup/sap-hana-db-about https://docs.microsoft.com/en-us/azure/backup/backup-azure-sap-hana-database#configure-backup

Reveal Solution Next Question

QUESTION: 14

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an SAP production landscape on-premises and an SAP development landscape on Azure.
You deploy a network virtual appliance to act as a firewall between the Azure subnets and the on-premises network.
You need to ensure that all traffic is routed through the network virtual appliance.
Solution: You deploy an Azure Standard Load Balancer.
Does this meet the goal?

Yes
No

Answer(s): A

Reveal Solution Next Question

QUESTION: 14

You have an SAP environment on Azure.
Your on-premises network uses a 1-Gbps ExpressRoute circuit to connect to Azure. Private peering is enabled on the circuit. The default route (0.0.0.0/0) from the on-premises network is advertised.
Whenever backups are copied to Azure Blob storage, the ExpressRoute circuit is saturated.
You need to resolve the issue without modifying the ExpressRoute circuit. The solution must minimize administrative effort.
What should you do?

Create a user-defined route that redirects traffic to the Blob storage
Create an application security group
Change the backup solution to use a third-party software that can write to the Blob storage
Enable virtual network private endpoints.

Answer(s): C

Reveal Solution Next Question

Free AZ-120 Exam Braindumps (page: 21)

QUESTION: 13

Explanation:

Reference:

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

QUESTION: 14

AZ-120 Exam Discussions & Posts