HOTSPOT (Drag and Drop is not supported)You are planning the Azure network infrastructure for an SAP environment.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: YesBox 2: NoA design that's not supported is the segregation of the SAP application layer and the DBMS layer into different Azure virtual networks that aren't peered with each other. We recommend that you segregate the SAP application layer and DBMS layer by using subnets within an Azure virtual network instead of by using different Azure virtual networks.Box 3: YesBe aware that network traffic between two peered Azure virtual networks is subject to transfer costs. Huge data volume that consists of many terabytes is exchanged between the SAP application layer and the DBMS layer. You can accumulate substantial costs if the SAP application layer and DBMS layer are segregated between two peered Azure virtual networks.
DRAG DROP (Drag and Drop is not supported)You plan to deploy multiple SAP HANA virtual machines to Azure by using an Azure Resource Manager template.How should you configure Accelerated Networking and Write Accelerator in the template? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:
Box 1: trueenableAcceleratedNetworking: If the network interface is accelerated networking enabled. To further reduce network latency between Azure VMs, we [Micorosoft] recommend that you choose Azure Accelerated Networking. Use it when you deploy Azure VMs for an SAP workload, especially for the SAP application layer and the SAP DBMS layer.Box 2: trueWrite Accelerator should be used for the volumes that contain the transaction log or redo logs of a DBMS. It is not recommended to use Write Accelerator for the data volumes of a DBMS as the feature has been optimized to be used against log disks.
https://docs.microsoft.com/en-us/azure/virtual-machines/workloads/sap/dbms_guide_general
This question requires that you evaluate the underlined text to determine if it is correct.You have an Azure resource group that contains the virtual machines for an SAP environment.You must have the Contributor role to grant permissions to the resource group.Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
Answer(s): B
Contributor - Can create and manage all types of Azure resources but can't grant access to others.User Access Administrator - Lets you manage user access to Azure resources.
HOTSPOT (Drag and Drop is not supported)Your on-premises network contains SAP and non-SAP applications.You have JAVA-based SAP systems that use SPNEGO for single-sign on (SSO) authentication.Your external portal uses multi-factor authentication (MFA) to authenticate users.You plan to extend the on-premises authentication features to Azure and to migrate the SAP applications to Azure.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: NoNeed AD FS for MFA. See box 3.Note: Azure Active Directory (Azure AD) Pass-through Authentication allows your users to sign in to both on- premises and cloud-based applications using the same passwords. This feature is an alternative to Azure AD Password Hash Synchronization (see Box 2).Box 2: YesPassword hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash, of the hash, of a users password from an on-premises Active Directory instance to a cloud-based Azure AD instance.Password hash synchronization is an extension to the directory synchronization feature implemented by Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Office 365. You sign in to the service by using the same password you use to sign in to your on-premises Active Directory instance.Box 3: YesIf your organization is federated with Azure AD, you can use Azure Multi-Factor Authentication to secure AD FS resources, both on-premises and in the cloud. Azure MFA enables you to eliminate passwords and provide a more secure way to authenticate.
HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: NoTo log in to a Linux VM with Azure AD credentials, install the Azure Active Directory login VM extension.Note: Azure AD Connect is the Microsoft tool designed to meet and accomplish your hybrid identity goals.Box 2: YesIf you deploy SAP VMs in a cross-premises scenario, where on-premises Active Directory and DNS are extended in Azure, it is expected that the VMs are joining an on-premises domain.Box 3: No
Post your Comments and Discuss Microsoft AZ-120 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-120 content, but please register or login to continue.