HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You plan to deploy a highly available SAP S/4HANA solution by using Azure Center for SAP solutions.You need to prepare the SAP installation resources for the deployment. The solution must follow the Azure Center for SAP solutions infrastructure deployment guidance.What should you configure as the source location for the installation resources, and what should you create to support the Azure fence agent? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: A blob in an Azure in an Azure Blob Storage container Source locationAzure Center for SAP solutions (ACSS) uses an Azure Blob Storage container to store the SAP media files needed for installation, and the user-assigned managed identity requires the Storage Blob Data Reader role on that storage account.Source location: You can use a storage account with a blob container to store the SAP installation media (SAP software).Role assignment: The managed identity must have the correct permissions to access the media files. Specifically, it needs the Storage Blob Data Reader role assigned on the storage account where the media is stored.Box 2: A Microsoft Entra user-assigned managed identityTo support Azure fence agent, createFor a highly available SAP S/4HANA deployment with Azure Center for SAP solutions, the Azure fence agent requires a managed identity or a service principal to manage the cluster VMs. This identity needs to have the correct Azure role access, such as the Managed Identity Operator role or the Virtual Machine Contributor role, to restart failed nodes via Azure APIs.Azure fence agent requirementsIdentity for authentication: The fence agent needs an identity to authenticate with Azure and perform actions.This can be either:*-> A User-assigned managed identity that is created beforehand.A Service principal.
https://learn.microsoft.com/en-us/azure/sap/center-sap-solutions/deploy-s4hana
You have an Azure subscription.You plan to deploy an SAP production landscape in Azure that will use a virtual machine scale set to deploy SAP NetWeaver.You need to recommend a solution to support the scale set. The solution must minimize administrative effort.What should you include in the recommendation?
Virtual Machine Scale Sets for SAP workloadVirtual machine scale sets offer two orchestration modes that enable improved virtual machine management.For SAP workloads, the Virtual Machines Scale Set with flexible orchestration is the recommended and only supported option, as it offers the ability to use different virtual machine SKUs and operating systems within a single scale set.Note:To deploy SAP NetWeaver with an Azure Virtual Machine Scale Set, you require a flexible-orchestration mode scale set with max spreading allocation policy and FD=1, high-availability (HA) storage (like NFS on Azure Files or Azure NetApp Files), a Pacemaker cluster for the central services, an Azure standard load balancer, and foundation services like a virtual network with DNS. You will also need to properly size the VMs and consider a deployment script to automate the installation.Azure infrastructure requirements*-> Virtual Machine Scale Set: Use the flexible orchestration mode and set the allocation policy to max spreading with a Fault Domain (FD) of 1.Virtual Network (VNet): A VNet is required, and for HA, it should have a subnet delegated for Azure NetApp Files if you choose that option.Azure Load Balancer: A standard load balancer is needed to provide a virtual IP address for the clustered SAP central services (ASCS/SCS).Storage: To make the shared directories like /sapmnt/SID and /usr/sap/trans highly available, use either NFS on Azure Files or NFS on Azure NetApp Files.DNS: Azure Private DNS is recommended for name resolution within the virtual network.SAP and OS requirements [do not apply here]
https://learn.microsoft.com/en-us/azure/sap/workloads/deployment-guide
HOTSPOT (Drag and Drop is not supported)You have an on-premises network.You have an Azure subscription.You plan to deploy an SAP production landscape that will include on-premises servers and Azure virtual machines. The landscape will be hosted on servers that run SUSE Linux Enterprise Server (SLES).You need to recommend a solution to standardize the provisioning and configuration of the SLES servers for SAP workloads. The solution must meet the following requirements:Automate provisioning for new on-premises servers and Azure virtual machines.Ensure that you can run the Azure VM extension for SAP solutions.Which package should you recommend for each requirement? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: Cloud-initPerform provisioning:To automate the provisioning of on-premises servers and Azure virtual machines for an SAP workload on Azure with SLES, use Terraform with the SUSE automation git repository for Azure VMs, and a manual OS image prep process for on-premises servers. For on-premises, manually prepare a SLES virtual machine image, including installing the Azure VM Agent and *cloud-init*, and generalizing the image for use on- premises. Once the image is prepared, automate the deployment of this image in Azure by creating a new VM using the Azure portal, CLI, or other automation tools.On-premises server automationPrepare the SLES image: Configure a SLES virtual machine image for use on-premises by preparing it with the Azure VM Agent, cloud-init, and other necessary configurations, such as SSH.Note:Cloud-init is a tool used to automate the initial setup of cloud instances, particularly Linux virtual machines, during their first boot. It reads configuration data, typically in YAML format, to perform tasks like configuring thehostname, installing packages, creating users, writing files, and running scripts without manual intervention. This process allows for the quick and consistent deployment of pre-configured servers.Box 2: Microsoft Azure Linux Agent (waagent)Run the Azure VM extension for SAP solutionsThe Azure Linux Agent (waagent) is a program that runs on Linux and FreeBSD virtual machines (VMs) in Microsoft Azure to manage their interaction with the Azure "fabric controller" or the underlying physical server. It handles tasks such as image provisioning, networking, diagnostics, and running VM extensions.
https://cloudinit.readthedocs.io/en/latest/explanation/introduction.html https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/agent-linux
You need to ensure that you can receive technical support to meet the technical requirements.What should you deploy to Azure?
Scenario: Ensure that SAP can provide technical support for all the SAP landscapes deployed to Azure.
https://blogs.sap.com/2019/07/22/sap-landscape-management-on-microsoft-azure-part-1/
HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
In a Hybrid-IT scenario, Active Directory from on-premises can be extended to serve as the authentication mechanism through an Azure deployed domain controller (as well as potentially using the integrated DNS).It is important to distinguish between traditional Active Directory Servers and Microsoft Azure Active Directory that provides only a subset of the traditional on-premises AD offering. This subset include Identity and AccessManagement, but does not have the full AD schema or services that many 3rd party application take advantage of. While Azure Active Directory IS a requirement to establish authentication for the Azure virtual machines in use, and it can synchronize users with customers' on-premises AD, the two are explicitly different and customers will likely continue to require full Active Directory servers deployed in Microsoft Azure.
Post your Comments and Discuss Microsoft AZ-120 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-120 content, but please register or login to continue.