Free AZ-120 Exam Braindumps
Planning and Administering Microsoft Azure for SAP Workloads Questions 181–185 (page: 38)

Updated On: 10-Feb-2026

HOTSPOT (Drag and Drop is not supported)

You have an Azure subscription.

You create a custom Windows image named image1 that contains SAP prerequisites.

You need to deploy image1 by using an Azure Resource Manager (ARM) template.

How should you complete the template? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

  1. See Explanation for the Answer.

Answer(s): A

Explanation:



Box 1: storageProfile
Microsoft.Compute virtualMachines,

Property values
storageProfile specifies the storage settings for the virtual machine disks.

storageProfile has the following property values:
* dataDisks
* diskControllerType
*-> imageReference
Specifies information about the image to use. You can specify information about platform images, marketplace images, or virtual machine images. This element is required when you want to use a platform image, marketplace image, or virtual machine image, but is not used in other creation operations.
* osDisk

Box 2: resourceId
Create new virtual machines from a managed image
If you want to create a virtual machine from a managed image, change the imageReference element and define these disk settings:

"storageProfile": {
"imageReference": {
"id": "[resourceId('Microsoft.Compute/images', 'myImage')]"
},
"osDisk": {
"name": "[concat('myOSDisk', copyindex())]",
"osType": "Windows",
"caching": "ReadWrite",
"createOption": "FromImage"
}
},

Note: ImageReference has the following property values:
* communityGalleryImageId
*-> id
Resource Id
* offer
* publisher
* sharedGalleryImageId
* sku
* version



HOTSPOT (Drag and Drop is not supported)

You plan to deploy a highly available SAP development landscape in Azure.

You need to automate the deployment. The solution must meet the following requirements:

Ensure that SAP services can be managed by using the Azure portal.

Create a reproduceable deployment.

Minimize administrative effort.

What should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

  1. See Explanation for the Answer.

Answer(s): A

Explanation:



Box 1: SAP on Azure Deployment Automation Framework
To create the deployment

SAP Deployment Automation Framework is an open-source orchestration tool that can deploy, install, and maintain SAP environments. You can deploy the systems on any of the SAP-supported operating system versions and into any Azure region. You can create infrastructure for SAP landscapes based on SAP HANA and NetWeaver with AnyDB by using Terraform. The environments can be configured using Ansible.

Incorrect:
* Azure Center for SAP solutions
Not for creating reproduceable deployments.

* SAP Landscape Management (LaMa)
SAP Landscape Management is an orchestration and automation solution that simplifies, automates and centralizes the management [not deployments] of your SAP systems running in different infrastructures (on premise, private/public cloud or hybrid).

Box 2: Terraform
To perform the deployment


Reference:

https://learn.microsoft.com/en-us/azure/sap/automation/deployment-framework



HOTSPOT (Drag and Drop is not supported)

You have an Azure subscription named Sub1 that contains a Microsoft Sentinel workspace named Workspace1.

You have an SAP RISE managed workload that is integrated with Sub1.

You need to implement the Microsoft Sentinel solution for SAP applications in Workspace1. The solution must meet the following requirements:

Generate an incident based on transaction codes when a sensitive SAP transaction is executed by an

unauthorized user.
When an incident is generated, send a notification to a designated Microsoft Teams channel.

Minimize administrative effort.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

  1. See Explanation for the Answer.

Answer(s): A

Explanation:



Box 1: A watchlist
Generate an incident based on transaction codes when a sensitive SAP transaction is executed by an unauthorized user.

Microsoft Sentinel solution for SAP applications: security content reference

Attempts to bypass SAP security mechanisms
Rule name:
* SAP - Execution of a Sensitive Transaction Code
Identifies the execution of a sensitive Transaction Code.

Maintain transaction codes in the SAP - Sensitive Transaction Codes watchlist.

Box 2: A Workbook
When an incident is generated, send a notification to a designated Microsoft Teams channel.

Built-in workbooks
Use the following built-in workbooks to visualize and monitor data ingested via the SAP data connector. After you deploy the SAP solution, you can find SAP workbooks in the Templates tab.

* SAP Audit Controls
Helps you check your SAP environment's security controls for compliance with your chosen control framework, using tools for you to do the following:

- Assign analytics rules in your environment to specific security controls and control families
* -> Monitor and categorize the incidents generated by the SAP solution-based analytics rules
- Report on your compliance


Reference:

https://learn.microsoft.com/en-us/azure/sentinel/sap/sap-solution-security-content



You have a Hyper-V generation 2 virtual machine image that was prepared by running sysprep.exe.

You plan to use the image as part of an SAP application server deployment on Azure.

You need to ensure that you can deploy the image as an Azure virtual machine.

What should you do first?

  1. Convert the virtual disk to a dynamically expanding disk.
  2. Use Azure Storage Explorer to upload the VHDX file to a storage account.
  3. Convert the VHDX disk image to a VHD disk image.
  4. Run azcopy to upload the VHDX file to a managed disk.

Answer(s): C

Explanation:

Before you upload a Windows virtual machine (VM) from on-premises to Azure, you must prepare the virtual hard disk (VHD or VHDX). Azure supports both generation 1 and generation 2 VMs that are in VHD file format and that have a fixed-size disk. The maximum size allowed for the OS VHD on a generation 1 VM is 2 TB.

You can convert a VHDX file to VHD, convert a dynamically expanding disk to a fixed-size disk, but you can't change a VM's generation.


Reference:

https://learn.microsoft.com/en-us/azure/virtual-machines/windows/prepare-for-upload-vhd-image



HOTSPOT (Drag and Drop is not supported)

You have an Azure subscription.

You plan to deploy an SAP landscape by using Azure Center for SAP solutions.

You need to use custom virtual machine images for the deployment.

To what should you set Security type for the virtual machines, and where should you store the custom images? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

  1. See Explanation for the Answer.

Answer(s): A

Explanation:



Box 1: Standard
Security type

Azure Center for SAP solutions now supports deployment of SAP system VMs with custom OS images along with the Azure Marketplace images.

Check that the image VM is of the Standard security type.

Box 2: Azure Compute Gallery
Store in

Using a Custom OS Image
You can use custom images for deployment in Azure Center for SAP Solutions from the Azure Compute Gallery
Custom image prerequisites include:
* Create and upload a VM to a gallery in Azure Compute Gallery

* Before beginning the deployment, make sure the image is available in Azure Compute Gallery.

* Check that the image VM is of the Standard security type. [Box 1]


Reference:

https://learn.microsoft.com/en-us/azure/sap/center-sap-solutions/deploy-s4hana#using-a-custom-os-image



Viewing page 38 of 84
Viewing questions 186 - 190 out of 432 questions


Post your Comments and Discuss Microsoft AZ-120 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!