You have an existing SAP landscape on Azure. All SAP virtual machines are on the same virtual network. The SAP application servers, SAP management servers, and SAP database servers are each on their own subnet.You need to ensure that only the application and management servers can access the subnet to which the database servers connect.What should you configure?
Answer(s): D
You must create a network for the infrastructure deployment on Azure. Make sure to create the network in the same region that you want to deploy the SAP system.Some of the required network components are:A virtual networkSubnets for the Application Servers and Database Servers. Your configuration needs to allow communication between these subnets.Azure network security groupsRoute tables*-> Firewalls (or NAT Gateway)
https://learn.microsoft.com/en-us/azure/sap/center-sap-solutions/prepare-network
You plan to deploy an SAP landscape on Azure that will use SAP HANA on Azure (Large Instances).You need to ensure that outbound traffic from the application tier can flow only to the database tier.What should you use?
Answer(s): A
Application security groups enable us to configure network security as a natural extension of an application's structure. We can group VMs based on the application and define network security policies based on those groups. In this way we can achieve isolation between applications, introduce zero trust model limiting access to what is required and use easy to remember naming convention which fits our needs instead of listing down hundreds of IP address.ASG patterns in SAP deploymentsGroup by SAP applicationIn this pattern, we create an ASG for each SAP application on corresponding tiers i.e.one on the DB subnet and one on the application subnet. This pattern gives you most fine-grained control and isolation but requires deep understanding of network traffic patterns in your SAP landscape.
https://techcommunity.microsoft.com/t5/running-sap-applications-on-the/application-security-groups-in-sap-on- azure-deployments/ba-p/2515545
DRAG DROP (Drag and Drop is not supported)You have an Azure tenant and an SAP Cloud Platform tenant.You need to ensure that users sign in automatically by using their Azure AD accounts when they connect to SAP Cloud Platform.Which four actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Azure Active Directory single sign-on (SSO) integration with SAP Cloud Identity ServicesStep 1: From the Azure Active Directory admin center, add the SAP Cloud Platform Identity Authentication enterprise app.Add SAP Analytics Cloud from the galleryTo configure the integration of SAP Analytics Cloud into Azure AD, you need to add SAP Analytics Cloud fromthe gallery to your list of managed SaaS apps.1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.2. On the left navigation pane, select the Azure Active Directory service.3. Navigate to Enterprise Applications and then select All Applications.4. To add new application, select New application.5. In the Add from the gallery section, type SAP Analytics Cloud in the search box.6. Select SAP Analytics Cloud from results panel and then add the app. Wait a few seconds while the app is added to your tenant.Step 2: Configure the SAML settings for the Identifier and Reply URL.Configure Azure AD SSOFollow these steps to enable Azure AD SSO in the Azure portal.1. In the Azure portal, on the SAP Analytics Cloud application integration page, find the Manage section and select Single sign-on.2. On the Select a Single sign-on method page, select SAML.3. On the Set up Single Sign-On with SAML page, click the pencil icon for Basic SAML Configuration to edit the settings.4. On the Basic SAML Configuration section, if you wish to configure in IDP-initiated mode, perform the following steps:A . In the Identifier text box, type a value using the following pattern: <IAS-tenant-id>.accounts.ondemand.comB . In the Reply URL text box, type a URL using the following pattern: https://<IAS-tenant- id>.accounts.ondemand.com/saml2/idp/acs/<IAS-tenant-id>.accounts.ondemand.com* Details omitted*8. On the Set up Single Sign-On with SAML page, in the SAML Signing Certificate section, click Download to download the Metadata XML from the given options as per your requirement and save it on your computer.(Step 3)9. On the Set up SAP Cloud Identity Services section, copy the appropriate URL(s) as per your requirement.Step 3: From the Azure Active Directory Admin center, download the Federation Metadata XML file.Step 4: From the SAP Cloud Platform...Configure SAP Analytics Cloud SSO1. In a different web browser window, sign in to your SAP Analytics Cloud company site as an administrator.2. Select Menu > System > Administration.3. On the Security tab, select the Edit (pen) icon.4. For Authentication Method, select SAML Single Sign-On (SSO).5. To download the service provider metadata (Step 2), select Download. In the metadata file, find and copy the entityID value. In the Azure portal, on the Basic SAML Configuration dialog, paste the value in the Identifier box.
https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/sap-hana-cloud-platform-identity- authentication-tutorial
HOTSPOT (Drag and Drop is not supported)You plan to deploy an SAP production landscape on Azure.You need to identify which virtual machine series to use for the SAP HANA role and the SAP Central Services (SCS) role. The solution must meet the following requirements:Provide 384 GB of memory for the HANA role.Support ultra disks for the HANA role.Meet SAP certification.Minimize costs.Which virtual machine series should you identify for each role? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: E-SeriesSAP HANA roleE-SeriesOptimized for in-memory applicationsThe E-series Azure VMs are optimized for heavy in-memory applications such as SAP HANA. These VMs are configured with high memory-to-core ratios, which makes them well-suited for memory-intensive enterprise applications, large relational database servers, in-memory analytics workloads etc.Example workloads include SAP HANA (e.g., E64s v3, E20ds v4, E32ds v4, E48ds v4, E64ds v4), SAP S/4 HANA application layer, SAP NetWeaver application layer, and more broadly memory-intensive enterprise applications, large relational database servers, data warehousing workloads, business intelligence applications, in-memory analytics workloads, and additional business-critical applications, including systems that process transactions of a financial nature.Box 2: B-SeriesSAP Central Services (SCS) roleBs-SeriesEconomical burstable VMsBs-series VMs are economical virtual machines that provide a low-cost option for workloads that typically run at a low to moderate baseline CPU utilization, but sometimes need to burst to significantly higher CPU utilization when the demand rises. Bs-series VMs are not hyperthreaded.Example workloads include development and test servers, low-traffic web servers, small databases, micro services, servers for proof-of-concepts, build servers.Incorrect:* A-SeriesEntry-level VMs for dev/testA-series VMs have CPU performance and memory configurations best suited for entry level workloads like development and test, code repositories etc... They are economical and provide a low-cost option to get started with Azure.Example workloads include development and test servers, low traffic web servers, small to medium databases, servers for proof-of-concepts, and code repositories.* D-SeriesGeneral purpose computeThe D-series Azure VMs offer a combination of vCPUs, memory, and temporary storage able to meet the requirements associated with most production workloads.Example workloads include many enterprise-grade applications, e-commerce systems, web front ends, desktop virtualization solutions, customer relationship management applications, entry-level and mid-range databases, application servers, gaming servers, media servers, and more...
DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains an availability set named AS1 and a virtual machine named VM1.VM1 hosts an SAP NetWeaver application.You need to ensure that AS1 includes VM1.Which four PowerShell cmdlets should you run in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Step 1: Remove-AzVMCreate VMs inside an availability setVMs must be created within the availability set to make sure they are correctly distributed across the hardware. An existing VM cannot be added to an availability set after it is created.Step 2: New-AzVMConfigThe New-AzVMConfig cmdlet creates a configurable local virtual machine object for Azure.Parameters include-AvailabilitySetIdSpecifies the ID of an availability set. To obtain an availability set object, use the Get-AzAvailabilitySet cmdlet.The availability set object contains an ID property.Virtual machines specified in the same availability set are allocated to different nodes to maximize availability.Currently, a VM can only be added to availability set at creation time. The availability set to which the VM is being added should be under the same resource group as the availability set resource. An existing VM cannot be added to an availability set.Step 3: Set-AzVMOSDiskStep 4: New-AzVMThe New-AzVM cmdlet creates a virtual machine in Azure. This cmdlet takes a virtual machine object as input.Example:$VirtualMachine = New-AzVMConfig -VMName $VMName -VMSize $VMSize $VirtualMachine = Set-AzVMOperatingSystem -VM $VirtualMachine -Windows -ComputerName $ComputerName -Credential $Credential -ProvisionVMAgent -EnableAutoUpdate $VirtualMachine = Add-AzVMNetworkInterface -VM $VirtualMachine -Id $NIC.Id $VirtualMachine = Set-AzVMOSDisk -VM $VirtualMachine -Name $OSDiskName -VhdUri $OSDiskUri - SourceImageUri $SourceImageUri -Caching $OSDiskCaching -CreateOption $OSCreateOption -WindowsNew-AzVM -ResourceGroupName $ResourceGroupName -Location $LocationName -VM $VirtualMachine - Verbose -Zone @("1")This example takes an existing sys-prepped, generalized custom operating system image and attaches a data disk to it, provisions a new network, deploys the VHD, and runs it.Incorrect:* Update-AzAvailabilitySetThe Update-AzAvailabilitySet cmdlet updates an availability set.Syntax:Update-AzAvailabilitySet[-AvailabilitySet] <PSAvailabilitySet>[[-Sku] <String>][-ProximityPlacementGroupId <String>][-Tag <Hashtable>][-AsJob][-DefaultProfile <IAzureContextContainer>][-WhatIf][-Confirm][<CommonParameters>]
https://learn.microsoft.com/en-us/powershell/module/az.compute/new-azvm
Post your Comments and Discuss Microsoft AZ-120 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-120 content, but please register or login to continue.